Access Policy Configuration Example - Limit Snmpv3 To Specific Host And Telnet Access To A Specific Network; Configuration - Avaya VSP 4000 Technical Configuration Manual

9.5 Access Policy Configuration Example – limit
SNMPv3 to specific host and Telnet Access to a
specific network
9.5.1

Configuration

A policy can be added to allow administrator to specify a group or groups for SNMPv3 access. This allows
the administrator to create separate policies for SNMP users based on USM.
For this example, we wish setup a policy to limit SNMPv3 to a specific host and allow Telnet access to a
network. Overall, we wish to configure the following:

Create SNMPv3 AuthPriv User
o
Add an SNMPv3 AuthPriv user using MD5 authentication and DES privacy protocol
o
User name = user1, MD5 authentication password = user1234, and DES privacy password =
userpric
o
Use SNMP USM group name of group_1

Create access policy 2
o
Limit SNMP USM group_1 only to host 172.30.20.21

Create access policy 3
o
Limit Telnet access only to network 172.30.0.0/16
Step 1 - Add SNMPv3 user
VSPswitch:1(config)#load-encryption-module DES
VSPswitch:1(config)#snmp-server user user1 group group_1 md5 user1234 des userpriv
VSPswitch:1(config)#snmp-server group group_1 "" auth-priv read-view org write-view
org

Note, in VOSS 4.2 and later, it is not necessary to manually load the encryption modules. In
these releases, the encryption modules are loaded automatically with the run-time image.
Step 2 - Assuming no access policies have been created and we wish to leave the default, policy
1 intact (which allows for ftp, http, telnet and ssh access), we can start with policy 2 and name
the policy policy2 for SNMPv3 access
VSPswitch:1(config)#access-policy 2
VSPswitch:1(config)#access-policy 2 name policy2
VSPswitch:1(config)#access-policy 2 host 172.30.20.21
VSPswitch:1(config)#access-policy 2 accesslevel rwa
VSPswitch:1(config)#access-policy 2 snmp-group group_1 usm
VSPswitch:1(config)#access-policy 2 access-strict
VSPswitch:1(config)#access-policy 2 snmpv3
March 2015
Avaya Inc. – External Distribution
avaya.com
132