Industrial Managed
Ethernet Switch – EH9711
User Manual
Page
49
of
223
2.5.1.10
SNMP Users
This submenu allows users to configure SNMPv3 user table on this page. The entry index keys are
Engine ID
and
User Name
.
As mentioned earlier, SNMPv3 is a more secure SNMP protocol than earlier versions.
In this part, the users will be able to set
a password and an encryption key to enhance the data security. When choosing this option, the users can configure SNMPv3’s
authentication and encryption. MD5 (Message-Digest algorithm 5) is used for authentication password and DES (Data
Encryption Standard) is used for data encryption algorithm. Figure 2.41 shows the SNMPv3 Authentication Setting’s options.
The users can view existing SNMPv3 users’ setting on the upper table where it provides information about user name,
authentication type, and data encryption (or privacy protocol). The users have an option to remove existing SNMPv3 user by
clicking on the
Delete
button under the
Delete
column of each entry. To add a new SNMPv3 user, the users have to click
Add
New Entry
button, and enter
Engine ID
,
User
Name
,
Security Level, Authentication Protocol
,
Authentication Password
,
Privacy Protocol
, and
Privacy Password
.
The authentication password has the maximum length of 31 characters. Note that
if no password is provided, there will be no authentication for SNMPv3. Table 2.25 lists the descriptions of SNMPv3 User
settings.
Figure 2.41 Webpage to Configure SNMP Users
Table 2.25 Descriptions of SNMP Users
Label
Description
Factory Default
Delete
Check to delete the entry. It will be deleted during the next save.
Engine ID
An octet string identifying the engine ID that this entry should belong to. The
string must contain an even number (in hexadecimal format) with number of
digits between 10 and 64, but all-zeros and all-'F's are not allowed. The
SNMPv3 architecture uses the User-based Security Model (USM) for
message security and the View-based Access Control Model (VACM) for
access control. For the USM entry, the usmUserEngineID and usmUserName
are the entry's keys. In a simple agent, usmUserEngineID is always that
agent's own snmpEngineID value. The value can also take the value of the
snmpEngineID of a remote SNMP engine with which this user can
communicate. In other words, if user engine ID equal system engine ID then
it is a local user; otherwise it is a remote user.
Follow DUT’s
MAC address to
create Engine ID
User Name
A string identifying the user name that this entry should belong to. The
allowed string length is 1 to 32, and the allowed content is ASCII characters
from 33 to 126.
Security Level
Indicates the security model that this entry should belong to. Possible
security models are:
NoAuth, NoPriv
: No authentication and no privacy.
Auth, NoPriv
: Authentication and no privacy.
Auth, Priv
: Authentication and privacy.
The value of security level cannot be modified if entry already exists. That
means it must first be ensured that the value is set correctly.
Auth, Priv
Authentication Protocol
Indicates the authentication protocol that this entry should belong to. Possible
authentication protocols are:
None
: No authentication protocol.
: An optional flag to indicate that this user uses MD5 authentication
protocol.
: An optional flag to indicate that this user uses SHA authentication
protocol.
MD5
