Model 5399 Remote Access Concentrator Network Administrator’s Guide for UNIX
Chapter 2 Simple Network Management Protocol (SNMP)
A-62
Book A
Table B-17. Supported SNMP Commands
When the allow_snmp_sets parameter is enabled, the 5399 RAC accepts
SNMP set commands from IP hosts addreses and communities that have
Read-write access permissions. When disabled, the 5399 RAC rejects all
SNMP set commands; the 5399 RAC SNMP agent returns the error no
such name for the first object in the set command (for more details, see
arap_v42bis on page A-41).
SNMP version 1 is inherently a non-secure protocol. SNMP bypasses the
Annex’s security measures. If security is a concern, the administrator
should consider taking the following security measures:
•
Define the community strings for specific IP addresses with
Read-write access.
•
Disable all other SNMP access by defining None or Read-only
access.
•
Institute filters on any firewall router to block SNMP traffic from
outside the local network. This is good practice in all cases, not
just concerning the Annex.
Action
Description
get
Retrieves the value of a specific object from one of the
supported MIBs.
get-next
Traverses the MIB tree to retrieve the next object’s management
information.
set
Modifies the values of MIB objects. The 5399 RAC private
enterprise MIB and several objects in the standard MIBs allow
you to configure the 5399 RAC from an SNMP management
station on the network rather than using the na utility or CLI
admin command.
trap
Asynchronously reports significant events.