ELSA LANCOM Business LC-4X00, Руководство пользователя

Страница: 35 / 276

Configuration modes
ELSA LANCOM Business
25
Access protection in SNMP V.1
Access to SNMP objects is controlled using so-called communities. A community is
basically a password used to govern access to particular classes of information. The
router permits read-only access to all parameters and tables through the 'public'
community. Bear in mind that this community cannot execute any write accesses.
You must use the device's password if you wish to write data using SNMP. Write access
using SNMP will
not be granted as a matter of principle if the router's password is not
entered.
The settings in 'Setup/Config-module' are evaluated as follows if using SNMP to access
the router:
If the trapping mechanism is enabled and a failed access attempt is detected, an
'Authentication Failed' trap is triggered and sent to the manager(s) in the SNMP trap
table.
Bear in mind that the access protection given by the community mechanism in the SNMP
V.1 is only very limited since the data, the MIB IDs and the communities are not encrypted
in the UDP data blocks of requests and responses as they are transmitted.
Deleting rows in tables using SNMP
SNMP itself has no mechanisms intended for deleting. You therefore have to use a trick
to delete entries from tables or to insert new rows in tables.
If you need to delete a row, you have to change the index entry value, i.e. the value in the
first column, to its current value.
쮿
For example: You want to delete the 3rd row from following IP routing table.
Entry Value Meaning
Password-required On Access through the 'public' community is barred.
Password-required Off Access via the 'public' community is read-only.
All actions can be executed if the password is given as the
community.
LAN/WAN-config Off All access via LAN/WAN is barred.
LAN/WAN-config On Access via the 'public' community is read-only.
All actions can be executed if the password is given as the
community.
LAN/WAN-config Read Access via both the 'public' community and the password is
read-only.
IP-address IP netmask Router-name Distance
192.168.0.0 255.255.0.0 0.0.0.0 0
172.16.0.0 255.240.0.0 0.0.0.0 0