Establishing Snmp Community Strings; In This Chapter; Encryption Of Snmp Community Strings - Dell PowerConnect B-RX Configuration Manual

Securing SNMP Access

In this chapter

Simple Network Management Protocol (SNMP) is a set of protocols for managing complex
networks. SNMP sends messages, called protocol data units (PDUs), to different parts of a
network. SNMP-compliant devices, called agents, store data about themselves in Management
Information Bases (MIBs) and return this data to the SNMP requesters.
This chapter introduces a few methods used to secure SNMP access to the BigIron RX.

Establishing SNMP community strings

SNMP versions 1 and 2 use community strings to restrict SNMP access. The default passwords for
SNMP access are the SNMP community strings configured on the device:
•
•
You can configure as many additional read-only and read-write community strings as you need. The
number of strings you can configure depends on the memory on the device. There is no practical
limit.
If you delete the startup configuration file, the device automatically re-adds the default "public"
read-only community string the next time you load the software.

Encryption of SNMP community strings

The software automatically encrypts SNMP community strings. Users with read-only access or who
do not have access to management functions in the CLI cannot display the strings. For users with
read-write access, the strings are encrypted in the CLI but are shown in the clear in the Web
management interface.
Encryption is enabled by default. You can disable encryption for individual strings or trap receivers
if desired. See the next section for information about encryption.
BigIron RX Series Configuration Guide
53-1001810-01
•
Establishing SNMP community strings . . . . . . . . . . . . . . . . . . . . . . . . . . . 1001
•
Using the user-based security model . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1003
•
Configuring your NMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1003
•
Defining SNMP views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1009
The default read-only community string is "public". To open an SNMP session, enter "get" and
"public" for the user name and password.
By default, you cannot open a read-write management session. You first must configure a
read-write community string using the CLI. Then you can log on using "set" as the user name
and the read-write community string you configure as the password.
Chapter
36
1001