Cisco DS-C9216I-K9, Руководство по настройке

Страница: 212 / 436

18-16
Cisco MDS 9000 Fabric Manager Switch Configuration Guide
OL-7753-01
Chapter 18 Configuring Switch Security
About SNMP Security
To create a new role, follow these steps:
Step 1
Click Create . You see the Create Roles dialog box.
Step 2 Enter an identifier for the role in the Role field.
Step 3
Select one of the following security levels:
• authNoPrv—Authentication without encryption
•
AuthPriv—Authentication with encryption
Step 4 For Read access, click the All radio button to enable full read access or click List and check each check
box in the list to enable read access to specific information.
Step 5
For Write access, click the All radio button to enable full read access or click List and check each check
box in the list to enable read access to specific information.
Step 6 Click Apply to create the new role, or click OK to create the role and close the window.
Viewing SNMP Community and User Information
To view information about SNMP users, roles, and communities from Fabric Manager, choose
Security > SNMP from the Physical pane menu tree and click the Users , Roles , or Communities tab.
You see the list of SNMP users, roles, or communities in the Information pane.
To view this information from the Device Manager, choose Security > SNMP . The SNMP dialog box
displays.
Group-Based SNMP Access
Because group is a standard SNMP term used industry-wide, we refer to role(s) as group(s) in this SNMP
section.
SNMP access rights are organized by groups. Each group in SNMP is similar to a role through the CLI.
Each group is defined with three accesses: read access, write access, and notification access. Each access
can be enabled or disabled within each group.
You can begin communicating with the agent once the your user name is created, your roles are set up
by your administrator, and you are added to the roles.
Users configured through the CLI are different from users configured through SNMP. These
configurations do not directly correspond with each other. However, you can configure both CLI and
SNMP identically, if required.
Configuring Common Roles
From Release 1.2(x), CLI and SNMP in all switches in the Cisco MDS 9000 Family use common roles.
You can use SNMP to modify a role that was created using CLI and vice versa.