Cambium Networks PMP 450d Series, Руководство пользователя

Страница: 159 / 215

Chapter 3: System planning Security planning
Page 3-37
Planning for HTTPS operation
Before starting to configure HTTPS operation, ensure that the cryptographic material listed in
Table 70 is available.
Table 70 HTTPS security material
Item Description Quantity required
User Defined Security
Banner The banner provides warnings and notices
to be read by the user before logging in to
the ODU. Use text that is appropriate to
the network security policy. Normally one per link.
This depends upon
network policy.
Port numbers for HTTP,
HTTPS and Telnet Port numbers allocated by the network. As allocated by
network.
Planning for SNMPv3 operation
SNMP security mode
Decide how SNMPv3 security will be configured.
MIB-based security management uses standard SNMPv3 MIBs to configure the user-based
security model and the view-based access control model. This approach provides considerable
flexibility, allowing a network operator to tailor views and security levels appropriate for different
types of user. MIB-based security management may allow a network operator to take advantage of
built-in security management capabilities of existing network managers.
Web-based security management allows an operator to configure users, security levels, privacy
and authentication protocols, and passphrases using the 450 Platform Family web-based
management interface. The capabilities supported are somewhat less flexible than those
supported using the MIB-based security management, but will be sufficient in many applications.
Selection of web-based management for SNMPv3 security disables the MIB-based security
management. 450 Platform Family does not support concurrent use of MIB-based and web-based
management of SNMPv3 security.
Web-based management of SNMPv3 security
Initial configuration of SNMPv3 security is available only to HTTP or HTTPS user accounts with
security role of Security Officer.
Identify the format used for SNMP Engine ID. The following formats are available:

MAC address (default)

5 and 32 hex characters (the hex character input is driven by RFC 3411 recommendations on
the Engine ID)