Microwave Data Systems iNET 900 Series, Руководство пользователя

Страница: 161 / 180

MDS 05-2806A01, Rev. E.1 MDS iNET 900 Series User’s Guide 153
manager, they will be reset to whatever has been stored for local man-
agement on power-cycle.
This behavior was chosen based on RFC specifications. The SNMP
Manager and Agent don’t exchange passwords, but actually exchange
keys based on passwords. If the Manager changes the Agent’s password
the Agent doesn’t know the new password; just the new key. In this case,
only the Manager knows the new password. This could cause problems
if the Manager loses the password. If that happens, the Agent becomes
unmanageable. Resetting the Agent’s passwords (and therefore keys) to
what is stored in flash memory upon power-cycle prevents the serious
problem of losing the Agent’s passwords.
If passwords are managed locally, they can be changed on the Agent (via
the console). Any attempts to change the passwords for the Agent via an
SNMP Manager will fail when the Agent is in this mode. Locally
defined passwords will survive a power-cycle.
In either case, the SNMP Manager needs to know the initial passwords
that are being used in order to talk to the Agent. If the Agent’s passwords
are configured via the Manager, then they can be changed from the Man-
ager. If the passwords are managed locally, then the Manager must be
re-configured with any password changes in order to continue to talk to
the Agent.
Password-Mode Management Changes
When the password management mode is changed, the active passwords
used by the Agent may also change. Some common scenarios are dis-
cussed below:
Common Scenarios • Passwords are currently being handled by the Manager. The
assigned passwords are
Microwave
(Auth), and
Rochester
(Priv).
Configuration is changed to manage the passwords locally. The
passwords stored on the radio were Fairport (Auth), and
Churchville (Priv) (If local passwords have never been used,
then MDSAuthPwd and MDSPrivPwd will be used). These
passwords will now be used by the Agent to re-generate keys.
The Manager will need to know these passwords in order to talk
to the Agent.
• Passwords are currently being managed locally. The local pass-
words are
Fairport
(Auth) and
Churchville
(Priv). Configuration is
changed to handle the passwords from the Manager. The same
passwords will continue to be used, but now the Manager can
change them.
• Passwords are currently being managed locally. The local pass-
words are
Fairport
(Auth) and
Churchville
(Priv). Passwords are
changed to
Brighton
(Auth) and
Perinton
(Priv). The Agent will
immediately generate new keys based on these passwords and
start using them. The Manager will have to be re-configured to
use these new passwords.