artisan WIENER Mini Crate 475, Руководство пользователя

Страница: 25 / 41

User’s Manual 475 Mini Crate Series
W-I
e
– N
e
-R
Plein & Baus GmbH
12/11/2017 22
3.5 SNMP Version 3
3.5.1 SNMPv3 adds security features to the SNMP protocol. The main enhancements compared to
SNMP version 2c are
user names instead of community names
possible authentication (to be sure the data sent from the computer to the crate and vice versa is from
an authorized user)
possible
privacy (encryption to avoid the data “on the wire” can be understand/modified by a not
authorized entity)
3.5.2 Users
The SNMP v3 users are fixed and can not be changed. The name is related to the also existing SNMP
v2c communities:
- public Read-Only access
- private All operations allowed by direct access of the front panel (e.g.
switch on/off)
- admin Change of supervision limits
- guru Change of voltage/current settings (might damage electronics if
done wrong)
- wiener This user is reserved for W-IE-NE-R tools for special setup
operations
3.5.3 Authentication
The used authentication protocol is HMAC-MD5-96 (RFC3414). The initial password (authentication
key, authKey) is “MySecret”, identical for all users.
3.5.4 Privacy (Encryption)
The used encryption protocol is CBC-DES (RFC3414). The initial password (privacy key, privKey) is
“MySecret” again, identical for all users.
3.5.5 Security Level
There are three possible security levels for each user:
- noAuthNoPriv No key for authentication or privacy required. This is similar to the SNMPv2c
protocol using users instead of communities
- authNoPriv Use authKey for authentication, no privKey required
- authPriv Both authKey and privKey must be supplied. This is the default
security level.
3.5.6 SNMP v3 Examples
Read sysDescr.0 wi th user “public”, security level “authPriv”, authentication protocol “MD5”,
authentication password “MySecret”, privacy protocol “DES” and privacy password “MySecret”: