Alcatel-Lucent OmniSwitch 6850 Series, Руководство по управлению

Страница: 191 / 292

Managing Switch User Accounts Setting Up SNMP Access for a User Account
OmniSwitch 6800/6850/9000 Switch Management Guide December 2007 page 7-19
For this user, if the SNMP community map mode is enabled (the default), the SNMP community map
must include a mapping for this user to a community string. In this example, the community string is
our_group :
-> snmp community map our_group user thomas
In addition, the global SNMP security level on the switch must allow non-authenticated SNMP frames
through the switch. By default, the SNMP security level is
privacy all ; this is the highest level of SNMP
security, which allows only SNMPv3 frames through the switch. Use the snmp security command to
change the SNMP security level. For more information about configuring SNMP globally on the switch,
see
Chapter 10, “Using SNMP.”
SNMP Access With Authentication/Encryption
To configure a user with SNMP access and authentication, enter the user command with the desired
authentication type ( sha , md5 , sha+des , and md5+des ).
-> user thomas password techpubs sha+des
When SNMP authentication is specified, an SNMP authentication key is computed from the user pass-
word based on the authentication/encryption setting. In this example, the switch would use the SHA
authentication algorithm and DES encryption on the
techpubs password to determine the SNMP authenti-
cation key for this user. The key is in hexadecimal form and is used for encryption/de-encryption of the
SNMP PDU.
The authentication key is only displayed in an ASCII configuration file if the snapshot command is
entered. The key is indicated in the file by the syntax authkey key . See Chapter 6, “Working With Config-
uration Files,” for information about using the snapshot command. The key is not displayed in the CLI.
Removing SNMP Access From a User
To deny SNMP access, enter the user command with the no snmp option:
-> user thomas no snmp
This command results in thomas no longer having SNMP access to manage the switch.