17
Table of Contents
Linksys
Groups
•
In SNMPv1 and SNMPv2, a community string is sent along with the SNMP
frames The community string acts as a password to gain access to an
SNMP agent However, neither the frames nor the community string are
encrypted Therefore, SNMPv1 and SNMPv2 are not secure
•
In SNMPv3, the following security mechanisms can be configured
•
Authentication—The device checks that the SNMP user is an authorized
system administrator This is done for each frame
•
Privacy—SNMP frames can carry encrypted data
Thus, in SNMPv3, there are three levels of security:
•
No security (No authentication and no privacy)
•
Authentication (Authentication and no privacy)
•
Authentication and privacy
SNMPv3 provides a means of controlling the content each user can read or
write and the notifications they receive A group defines read/write privileges
and a level of security It becomes operational when it is associated with an
SNMP user or community
NOTE:
To associate a non-default view with a group, first create the view in the
Views page
To create an SNMP group:
STEP 1 Click Configuration > System Management > SNMP> Groups
•
This page displays the existing SNMP groups and their security levels The
following fields are displayed for each SNMP group (only the fields not
explained in the Add page):
•
No Authentication Read View—No authentication is needed, and anyone
is able to read the view
•
No Authentication Write View—No authentication is needed, and anyone
is able to write the view
•
No Authentication Notify View—No authentication is needed, and
anyone is able to receive notification of the view
•
Authentication Read View—Only authenticated users are allowed to read
the view By default, all users or community of a group can access all the
MIB objects A group can be limited to specific view(s) based on the read,
write, notify, authentication and/or privacy configurations
•
Authentication Write View—Only authenticated users are able to write
the view
•
Management access is write for the selected view
•
Authentication Notify View—Only authentication users are allowed
toreceived notification
•
Privacy Read View— When reading the objects in the view, the SNMP
messages are encrypted
•
Privacy Write View—When writing the object in the view, the SNMP
messages are encrypted
•
Privacy Notify View—Notification on the objects in the view are encrypted
STEP 2 Click Add
STEP 3 Enter the parameters
•
Group Name—Enter a new group name
•
Security Model—Select the SNMP version attached to the group,
SNMPv1, v2, or v3
•
Three types of views with various security levels can be defined For each
security level, select the views for Read, Write and Notify by entering the
following fields:
•
Enable—Select this field to enable the Security Level
•
Security Model—Define the security level attached to the group SNMPv1
and SNMPv2 support neither authentication nor privacy If SNMPv3 is
selected, select to enable one of the following:
•
No Authentication and No Privacy—Neither the Authentication nor the
Privacy security levels are assigned to the group
•
Authorized View—Select the Read, Write and Notify views associated with
this group and with the above security level
•
Authentication and No Privacy—Authenticates SNMP messages, and ensures
the SNMP message origin is authenticated but does not encrypt them
•
Authorized View—Select the Read, Write and Notify views associated with
this group and with the above security level
Содержание Smart Switch LGS3XX
Страница 1: ...Smart Switch LGS3XX User Guide ...
