Configuring Security using Device Manager
147
Field
Description
InReadOnlys
The total number of SNMP PDUs delivered to the
SNMP protocol for which the value of the error-status
field is readOnly. It is a protocol error to generate
an SNMP PDU containing the value readOnly in the
error-status field. This object is provided to detect
incorrect implementations of the SNMP.
InGenErrs
The total number of SNMP PDUs delivered to the SNMP
protocol for which the value of the error-status field is
genErr.
Working with SNMPv3
Simple Network Management Protocol (SNMP) provides a mechanism to
remotely configure and manage a network device. An SNMP agent is a
software process that listens on UDP port 161 for SNMP messages, and
sends trap messages using the destination UDP port 162.
SNMPv3 is based on the architecture of SNMPv1 and SNMPv2c. It supports
better authentication and data encryption than SNMPv1 and SNMPv2c.
SNMPv3 provides protection against the following security threats:
•
modification of SNMP messages by a third party
•
impersonation of an authorized SNMP user by an unauthorized person
•
disclosure of network management information to unauthorized parties
•
delayed SNMP message replays or message redirection attacks
The configuration parameters introduced in SNMPv3 makes it more secure
and flexible than the other versions of SNMP.
For more information on the SNMPv3 architecture, see RFC 3411.
This chapter describes the following concepts associated with SNMPv3:
•
"Initial Login with an SNMPv3 User" (page 148)
•
"User-based Security Model" (page 149)
•
"View-based Access Control Model" (page 152)
•
"Creating a community" (page 159)
•
"Management Targets" (page 161)
•
"The Notify Table" (page 166)
Nortel Ethernet Routing Switch 2500 Series
Security — Configuration and Management
NN47215-505 (323165-B)
02.01
Standard
4.1
19 November 2007
Copyright © 2007, Nortel Networks
.
Summary of Contents for 2526T
Page 227: ......
