Hirschmann GREYHOUND GRS1020, Справочное руководство

Страница: 428 / 619

Assistance in the protection from unauthorized access
7.1 Changing the SNMPv1/v2 community
88
UM Config GRS
Release 8.0 09/2019
7 Assistance in the protection from unauthorized access
The device offers functions that help you protect the device against unauthorized access.
After you set up the device, carry out the following steps in order to reduce possible unauthorized
access to the device.

Changing the SNMPv1/v2 community

Disabling SNMPv1/v2

Disabling HTTP

Using your own HTTPS certificate

Using your own SSH key

Disabling Telnet

Disabling HiDiscovery

Enable IP access restriction

Adjusting the session timeouts

Deactivating the unused modules
7.1 Changing the SNMPv1/v2 community
SNMPv1/v2 works unencrypted. Every SNMP packet contains the IP address of the sender and the
plaintext community name with which the sender accesses the device. If SNMPv1/v2 is enabled,
then the device lets anyone who knows the community name access the device.
The community names public for read accesses and private for write accesses are preset. If you
are using SNMPv1 or SNMPv2, then change the default community name. Treat the community
names with discretion.
Perform the following steps:

Open the Device Security > Management Access > SNMPv1/v2 Community dialog.
The dialog displays the communities that are set up.

For the Write community, specify in the Name column the community name.

Up to 32 alphanumeric characters are allowed.

The device differentiates between upper and lower case.

Specify a different community name than for read access.

To save the changes temporarily, click the button.
enable Change to the Privileged EXEC mode.
configure Change to the Configuration mode.
snmp community rw <community name> Specify the community for read/write access.
show snmp community Display the communities that have been
configured.
save Save the settings in the non-volatile memory (
nvm
)
in the “selected” configuration profile.