3Com VCX V7111, Руководство пользователя

Страница: 368 / 464

368
3Com
®
VCX V7111 VoIP Gateway User Guide
The concept of trusted managers is considered to be a weak form of security and is
therefore, not a required part of SNMPv3 security, which uses authentication and privacy.
However, the board’s SNMP agent applies the trusted manager concept as follows:
ƒ There is no way to configure trusted managers for only a SNMPv3 user. An SNMPv2c
community string must be defined.
ƒ If specific IPs are configured as trusted managers (via the community table), then only
SNMPv3 users on those trusted managers are given access to the agent’s MIB objects.
Configuration of Trusted Managers using ini File
To set the Trusted Mangers table from start-up, write the following in the ini file:
SNMPTRUSTEDMGR_X = D.D.D.D
where X is any integer between 0 and 4 (0 sets the first table entry, 1 sets the second, and
so on), and D is an integer between 0 and 255.
Configuration of Trusted Managers using SNMP
To configure Trusted Managers, the EM must use the SNV7111-COMMUNITY-MIB, the
snmpTargetMIB and the TGT-ADDRESS-MASK-MIB.
To add the first Trusted Manager:
(The following procedure assumes that there is at least one configured read-write
community. There are currently no Trusted Managers. The taglist for columns for all
srCommunityTable rows are currently empty).
1
Add a row to the snmpTargetAddrTable with these values: Name=mgr0, TagList=MGR,
Params=v2cparams.
2
Add a row to the tgtAddressMaskTable table with these values: Name=mgr0,
tgtAddressMask=255.255.255.255:0. The agent does not allow creation of a row in this
table unless a corresponding row exists in the snmpTargetAddrTable.
3
Set the value of the TransportLabel field on each non-TrapGroup row in the
srCommunityTable to MGR.
The following procedure assumes that there is at least one configured read-write community.
There are currently one or more Trusted Managers. The taglist for columns for all rows in the
srCommunityTable are currently set to MGR. This procedure must be performed from one of
the existing Trusted Managers.
To add a subsequent Trusted Manager, take these 2 steps:
1
Add a row to the snmpTargetAddrTable with these values: Name=mgrN, TagList=MGR,
Params=v2cparams, where N is an unused number between 0 and 4.
2
Add a row to the tgtAddressMaskTable table with these values: Name=mgrN,
tgtAddressMask=255.255.255.255:0.