SynQor MPPS-4000-1U, Руководство оператора

Страница: 11 / 26

3.5 SNMP Page
The SNMP page configures the SNMP Interface (see Section 4). The MPS currently supports SNMPv1,
SNMPv2, and SNMPv3 messages. SNMPv3 includes options for encryption and authentication of
messages. If authentication is required for the SNMP interface, it is highly recommended that the web
interface also utilize authentication, see Section 3.3.5. Despite security on the SNMP interface, a
malicious actor could simply connect to the MPS via the web interface if the web interface is left
unsecured.
By default, the SNMP interface is not enabled, and must be explicitly enabled via the web interface on
the SNMP Configuration Pane (see Figure G).
All changes on this page are stored in non-volatile memory when the appropriate Apply button is
pressed.
Figure G SNMP Configuration Pane
3.5.1 Communities
SNMPv1 and SNMPv2 messages are authenticated by a community name. The interface allows the user
to set up three different read and write communities. Write communities are also given read access.
The community assigned in the MPS web interface must also be entered on the SNMP monitoring host
which will communicate with the MPS.
Community names are not encrypted within SNMP transmissions, so SNMPv1 and SNMPv2 communities
offer only very loose security. Community names can be read directly via examination of packets on the
network. To disable SNMPv1 and SNMPv2 access, do not enter any community names in the
configuration pane.