3Com VCX V7122, Руководство пользователя

Страница: 379 / 488

V7122 Gateway User Guide
379
A row with the same security level (noAuthNoPriv) must already exist in the
usmUserTable. (See the usmUserTable for details).
To delete the read-only, noAuthNoPriv SNMPv3 user (v3user):
1
If v3 user is associated with a trap destination, follow the procedure for associating a
different user to that trap destination. (See below.)
2
Delete the vacmSecurityToGroupTable row for SecurityName v3user, GroupName
ReadGroup1, and SecurityModel usm.
3
Delete the row in the usmUserTable for v3user.
To add a read-write, authPriv SNMPv3 user (v3user):
1
Clone the row with the same security level.
2
Change the authentication key and privacy key.
3
Activate the row. That is, set the row status to active(1).
4
Add a row to the vacmSecurityToGroupTable for SecurityName v3admin1, GroupName
ReadWriteGroup3, and SecurityModel usm(3).
A row with the same security level (authPriv) must already exist in the
usmUserTable (see the usmUserTable for details).
To delete the read-write, authPriv SNMPv3 user (v3admin1):
1
If v3admin1 is associated with a trap destination, follow the procedure for associating a
different user to that trap destination. (See below.)
2
Delete the vacmSecurityToGroupTable row for SecurityName v3admin1, GroupName
ReadWriteGroup1, and SecurityModel usm.
3
Delete the row in the usmUserTable for v3admin1.
Trusted Managers
By default, the agent accepts ‘get’ and ‘set’ requests from any IP address, as long as the
correct community string is used in the request. Security can be enhanced using the use of
Trusted Managers. A Trusted Manager is an IP address from which the SNMP Agent
accepts and processes ‘get’ and ‘set’ requests. An EM can be used to configure up to five
Trusted Managers.
If Trusted Managers are defined, all community strings work from all Trusted
Managers. That is, there is no way to associate a community string with particular
trusted managers.