ZyXEL Communications VES1724-56, Руководство пользователя

Страница: 343 / 414

Chapter 37 Access Control
VES1724-56 User’s Guide
343
Get Community Enter the Get Community string, which is the password for the incoming Get- and
GetNext- requests from the management station.
The Get Community string is only used by SNMP managers using SNMP version 2c or
lower.
Set Community Enter the Set Community, which is the password for incoming Set- requests from the
management station.
The Set Community string is only used by SNMP managers using SNMP version 2c or
lower.
Trap Community Enter the Trap Community string, which is the password sent with each trap to the
SNMP manager.
The Trap Community string is only used by SNMP managers using SNMP version 2c or
lower.
Trap Destination Use this section to configure where to send SNMP traps from the Switch.
Version Specify the version of the SNMP trap messages.
IP Enter the IPv4 or IPv6 addresses of up to four managers to send your SNMP traps to.
Port Enter the port number upon which the manager listens for SNMP traps.
Username Enter the username to be sent to the SNMP manager along with the SNMP v3 trap.
Note: This username must match an existing account on the Switch (configured in the
Management > Access Control > Logins screen).
User Information Use this section to configure users for authentication with managers using SNMP v3.
Note: Use the username and password of the login accounts you specify in this section to
create accounts on the SNMP v3 manager.
Index This is a read-only number identifying a login account on the Switch.
Username This field displays the username of a login account on the Switch.
Security Level Select whether you want to implement authentication and/or encryption for SNMP
communication from this user. Choose:
• noauth: to use the username as the password string to send to the SNMP manager.
This is equivalent to the Get, Set and Trap Community in SNMP v2c. This is the lowest
security level.
• auth: to implement an authentication algorithm for SNMP messages sent by this user.
• priv: to implement authentication and encryption for SNMP messages sent by this
user. This is the highest security level.
Note: The settings on the SNMP manager must be set at the same security level or higher
than the security level settings on the Switch.
Authentication Select an authentication algorithm. MD5 (Message Digest 5) and SHA (Secure Hash
Algorithm) are hash algorithms used to authenticate SNMP data. SHA authentication is
generally considered stronger than MD5, but is slower.
Privacy Specify the encryption method for SNMP communication from this user. You can choose
one of the following:
• DES - Data Encryption Standard is a widely used (but breakable) method of data
encryption. It applies a 56-bit key to each 64-bit block of data.
• AES - Advanced Encryption Standard is another method for data encryption that also
uses a secret key. AES applies a 128-bit key to 128-bit blocks of data.
Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses
these changes if it is turned off or loses power, so use the Save link on the top navigation
panel to save your changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Table 162
Management > Access Control > SNMP (continued)
LABEL DESCRIPTION