BSR 2000 Configuration and Management Guide
Release 1.0
4-28
MGBI
526360-001-00 Rev. B
2.
Use the
no snmp-server community
command to remove the specified
community string.
Example
MOT
(config)#
snmp-server community public
Configuring USM and VACM Security
You can define security levels for each SNMP Server by establishing a USM with
defined access levels. Set permissions to a specified set of MIB objects with the
VACM. These security methods encrypt transmissions between an SNMP client and
server and allow the SNMP Server to authenticate each user requesting access. They
also let you specify various protection levels (unsecured, authenticated, and
authenticated with encryption) that are common to SNMPv3. USM specifies
authentication and encryption functions. VACM specifies how access-control rules
are handled. Configuring USM and VACM security for an SNMP Server involves the
following tasks:
■
■
■
Associating Groups to MIB Views
■
Caution:
Using only a community name to establish SNMP access levels is
not a completely secure access control method.
The community string is
included in every packet transmitted between an SNMP client and server
but is not encrypted, which
makes SNMP Get/Set operations potentially
accessible to any packet capture software. Access to SNMP Get/Set
operations could provide the following:
■
A blueprint of a network topology and configuration
■
Control of a device configured for remote SNMP management
Note:
If you do not specify a view, the system sets a default to the
dod
MIB
group (that is, 1.3.6). If you do not specify an administrative permission
(read-only or read-write), the system uses the default of read-only.
Содержание BSR 2000
Страница 1: ...BSR 2000 Configuration and Management Guide 526360 001 00 Rev B Release 1 0 MGBI ...
Страница 6: ... Motorola Motorola Motorola Motorola Motorola Motorola Motorola Motorola Motorola ...
Страница 50: ......
Страница 130: ......
Страница 164: ......
Страница 458: ......
Страница 490: ......
Страница 580: ......
Страница 632: ......
Страница 648: ......
Страница 649: ......
Страница 650: ...526360 001 00 Rev B 7 06 MGBI Visit our website at www motorola com ...