Konica Minolta BIZHUB C300, Руководство пользователя [Операции безопасности

Страница: 98 / 188

Administrator Operations
2
C300 2-79
Ad
minist
ra
to
r Op
er
at
ions
Chapter 2
2.12.2 SNMP access authentication function
If the settings of the Administrator mode are to be changed using SNMP from
the PC, the user attempting to gain access is authenticated to be the Admin-
istrator of the machine by using the Write User Name and SNMP Password
(auth-password, priv-password) of the SNMP v3 Write settings made in this
machine.
Operation of the network setting function and the SNMP password change
function of the security control functions that can be used over the network
using SNMP is granted to the Administrator who is identified by a matching
SNMP password for the Write User Name.
The entry of a wrong SNMP password (auth-password, priv-password) is
counted as unauthorized access, if the Enhanced Security mode is set to
[ON]. If a wrong SNMP password (auth-password, priv-password) is entered
a predetermined number of times (once to three times) set by the Adminis-
trator of the machine or more, the machine is set into an access lock state,
rejecting any more logon attempts. To reset the access lock state, the Ad-
ministrator of the machine should perform the procedure for resetting the op-
eration prohibited state.
!
Detail
If [auth-password] has been selected for Security Level, hashing is used
for the authentication information (auth-password) to be transmitted. The
machine uses HMAC-MD5 for hashing.
If [auth-password/priv-password] has been selected for Security Level,
the authentication information (auth-password/priv-password) and data
(object ID that specifies the object to be changed, value to be set, etc.) to
be transmitted are used for hashing and encryption. The machine uses
CBC-DES for encryption.
For accessing the MIB, use the MIB browser corresponding to the above
encryption algorithm.
2.12.3 SNMP v3 setting function
The Administrator who has been authenticated through SNMP access au-
thentication from the PC is allowed to operate the SNMP password change
function.
The entry of a wrong SNMP password (auth-password, priv-password) is
counted as unauthorized access, if the Enhanced Security mode is set to
[ON]. If a wrong SNMP password (auth-password, priv-password) is entered
a predetermined number of times (once to three times) set by the Adminis-
trator of the machine or more, the machine is set into an access lock state,
rejecting any more logon attempts. To reset the access lock state, the Ad-
c300_security_E.book 79 ページ ２００７年４月１１日 水曜日 午前１０時４２分