Alcatel-Lucent 7705 SAR, Руководство по управлению системой

Страница: 165 / 356

SNMP
7705 SAR OS System Management Guide 165
The Alcatel-Lucent SNMP agent associates SNMPv1 and SNMPv2c community strings with
an SNMPv3 view.
Access Groups
Access groups associate a user group and a security model with the views the group can
access. An access group is defined by a unique combination of a group name, security model
(SNMPv1, SNMPv2c, or SNMPv3), and security level (no-authorization-no privacy,
authorization-no-privacy, or privacy).
An access group, is a template that defines a combination of access privileges and views. A
group can be associated with one or more network users to control their access privileges and
views.
Additional access parameters must be explicitly configured if the preconfigured access
groups and views for SNMPv1 and SNMPv2c do not meet your security requirements.
Users
By default, authentication and encryption parameters are not configured. Authentication
parameters that a user must use in order to be validated by the 7705 SAR can be modified.
SNMP authentication allows the device to validate the managing node that issued the SNMP
message and determine if the message has been tampered with.
User access and authentication privileges must be explicitly configured. In a user
configuration, a user is associated with an access group, which is a collection of users who
have common access privileges and views.