Medias Mediatrix 1204, Reference Manual

Page: 132 / 390

Chapter 7 - MIB Structure and SNMP SNMP Overview
106 Mediatrix 1204
Non-Secure Management Mode
In non-secure management mode, the unit responds to SNMP requests as follows:
SNMPv1: read-write on all MIB tree
SNMPv2c: read-write on all MIB tree
SNMPv3: read-write on all MIB tree by using:
• MD5 authentication
• Authentication password: “Md5Password” (initial password)
• DES encryption
• Encryption password: “DesPassword” (initial password)
SNMPv3: read-write on all MIB tree by using:
• SHA authentication
• Authentication password: “ShaPassword” (initial password)
• DES encryption
• Encryption password: “DesPassword” (initial password)
Secure Management Mode
In secure management mode, the unit responds to SNMP requests as follows:
SNMPv1: read-only on all MIB tree
SNMPv2c: read-only on all MIB tree
SNMPv3: the same values as for SNMPv3 in non-secure management mode
Notes
When using SNMPv3 with encryption (DES), you may experience delays when accessing MIB
variables. This is normal because encrypting an IP packet takes in general longer than sending
it over IP. If you experience any timeout, add some seconds to the timeout period of your MIB
browser, and then try to reach the unit again.
Suppose that the Mediatrix 1204 accepts requests with authentication only. If you perform
requests by using encryption and authentication, assuming that the authentication password is
valid, the SNMP agent still responds as if the requests were only authenticated.
If you clone an SNMPv3 user, and then remove authentication or privacy for it, ensure that a
row in
vacmGroupName matches its new constraints. If not, the unit is not accessible by using
the new clone parameters.
SNMPv3 Special Behaviour
Mediatrix units coming out of factory are set so that you can use all MIB variables by using SNMPv1,
SNMPv2c, or SNMPv3. However, you can decide to accept only SNMPv3 access by using passwords known
by administrators only for enhanced security. In this case, you should manually disable SNMPv1 / SNMPv2
so that SNMPv3 works properly. The Mediatrix 1204 thus refuses any SNMPv1 or SNMPv2 request it receives.
You can disable / enable SNMPv1 / SNMPv2 by using the MIB Browser included in the Mediatrix Unit Manager
Network (or any other MIB Browser) to modify the permissions related to SNMPv1 / SNMPv2 (security model).
These permissions are located in the
VacmAccessTable of the SNMP-VIEW-BASED-ACM-MIB (RFC 2575).
When using exclusively SNMPv3, a row from one of the following tables:
usmUserTable
vacmSecurityToGroupTable
vacmAccessTable
vacmViewTreeFamilyTable
Note:
If you forget or lose a password, perform a Factory Reset to reset the unit to the non-secure
management mode. See “Factory Reset” on page 21 for more details.