Lenovo Flex System Fabric CN4093, Инструкция по применению

Страница: 589 / 634

© Copyright Lenovo 2017 Chapter 39: Secure Input/Output Module
589
Managing User Accounts
SNMPv3 user accounts with customized attributes can be created on the CMM and
pushed to the IOM. For each SNMPv3 user account created on the CMM, the IOM
creates a local SNMPv3 user account. The SNMPv3 user database then creates new
user ‐ per ‐ profile user lists. It then uses this database to authenticate users.
Note:
SNMPv3 does not support LDAP user management, so the CMM must
provision SNMPv3 user accounts to the IOM.
Using Centralized SNMPv3 Management with SIOM
There is a setting on the CMM to indicate whether the SNMPv3 centralized user
management is enabled; this is called the Centralized Flag .
When the IOM runs as SIOM and the Centralized Flag is enabled, SNMPv3 will
enable Node Accounts and will disable Local Accounts. When the IOM runs as
LIOM or the Centralized Flag is disabled, SNMPv3 will use Local Accounts and
disable Node Accounts. Node Accounts represent accounts configured on the
CMM, while Local Accounts are accounts configured on the IOM.
Since there is no case where both the Node Account and Local Account are
enabled, the username of a Node Account can be duplicated with a Local Account
username.
Implementing SNMPv3 with SIOM
The following commands are available for implementing SNMPv3 with SIOM:

access snmp read-only

access snmp read-write

snmp-server access

snmp-server community

snmp-server group

snmp-server host

snmp-server notify

snmp-server read-community

snmp-server read-community-additional

snmp-server target-address

snmp-server target-parameters

snmp-server user

snmp-server version

snmp-server view

snmp-server write-community

snmp-server write-community-additional

show snmp-server v3