SMC Networks 8028L2, Руководство по управлению

Страница: 44 / 392

C
HAPTER
2
| Initial Switch Configuration
Basic Configuration
– 44 –
C
ONFIGURING
A
CCESS FOR
SNMP V
ERSION
3 C
LIENTS
To configure management access for SNMPv3 clients, you need to first
create a user, assign the user to a group, create a view that defines the
portions of MIB that the client can read or write, and then create an access
entry with the group and view. The following example creates a user called
Steve, indicating that MD5 will be used for authentication, and provides the
passwords for both authentication and encryption. It assigns this user to a
group called “r&d.” It then creates one view called “mib-2” that includes
the entire MIB-2 tree branch, and another view that includes the IEEE
802.1d bridge MIB. In the last step, it assigns these respective read and
read/write views to the group called “r&d.”
>snmp user add 800007e5017f000001 steve md5 greenearth des blueseas
>snmp group add usm steve r&d
>snmp view add mib-2 included .1.3.6.1.2.1
>snmp view add 802.1d included .1.3.6.1.2.1.17
>snmp access add r&d usm noauthnopriv mib-2 802.1d
>snmp configuration
.
.
.
SNMPv3 Users Table:
Idx Engine ID User Name Level Auth Priv
--- --------- -------------------------------- -------------- ---- ----
1 Local default_user NoAuth, NoPriv None None
2 Local steve Auth, Priv MD5 DES
.
.
.
SNMPv3 Groups Table;
Idx Model Security Name Group Name
--- ----- -------------------------------- --------------------------------
1 v1 public default_ro_group
2 v1 private default_rw_group
3 v2c public default_ro_group
4 v2c private default_rw_group
5 usm default_user default_rw_group
6 usm steve r&d
.
.
.
SNMPv3 Views Table:
Idx View Name View Type OID Subtree
--- -------------------------------- --------- ------------------------------
1 default_view included .1
2 mib-2 included .1.3.6.1.2.1
3 802.1d included .1.3.6.1.2.1.17
.
.
.
For a more detailed explanation on how to configure the switch for access
from SNMP v3 clients, refer to "Simple Network Management Protocol" on
page 128 , or refer to the specific CLI commands for SNMP starting on
page 331 .