Enabling Snmp - Alcatel OS-LS-6224 User Manual

3
Configuring the Switch
Model Level
v1 noAuthNoPriv
v1 noAuthNoPriv
v1 noAuthNoPriv
v2c noAuthNoPriv
v2c noAuthNoPriv
v2c noAuthNoPriv
v3 noAuthNoPriv
v3 AuthNoPriv
v3 AuthPriv
The predefined default groups and view can be deleted from the system.

Enabling SNMP

The Engine ID Page permits the enabling of both SNMP and Authentication
notifications.
An SNMPv3 engine is an independent SNMP agent that resides on the switch. This
engine protects against message replay, delay, and redirection. The engine ID is
also used in combination with user passwords to generate the security keys for
authenticating and encrypting SNMPv3 packets.
A local engine ID is automatically generated that is unique to the switch. This is
referred to as the default engine ID. If the local engine ID is deleted or changed, all
SNMP users will be cleared. You will need to reconfigure all existing users.
A new engine ID can be specified by entering 1 to 26 hexadecimal characters. If less
than 26 characters are specified, trailing zeroes are added to the value. For
example, the value "1234" is equivalent to "1234" followed by 22 zeroes.
SNMP is enabled by default.
Command Attributes
• Local Engine ID (10-64 Hex Characters) — Displays the local device Engine ID.
The field value is a hexadecimal string. Each byte in hexadecimal character strings
is two hexadecimal digits. Each byte can be separated by a period or a colon. The
Engine ID must be defined before SNMPv3 is enabled. Select a default Engine ID
that is comprised of an Enterprise number and the default MAC address.
• Use Default — Uses the device-generated Engine ID. The default Engine ID is
based on the device MAC address and is defined per standard as:
• First 4 octets — First bit = 1, the rest is IANA Enterprise number.
• Fifth octet — Set to 3 to indicate the MAC address that follows.
88
Table 3-4. SNMPv3 Security Models and Levels
Group Read View
DefaultROGroup defaultview
DefaultRWGroup defaultview
user defined user defined user defined
DefaultROGroup defaultview
DefaultRWGroup defaultview
user defined user defined user defined
user defined user defined user defined
user defined user defined user defined
user defined user defined user defined
Write View Security
none Community string only
defaultview Community string only
Community string only
none Community string only
defaultview Community string only
Community string only
A user name match only
Provides user authentication
via MD5 or SHA algorithms
Provides user authentication
via MD5 or SHA algorithms
and data privacy using DES
56-bit encryption