Local Engine Id; Remote Engine Id - Nortel BES50GE-12T PWR User Manual

140 BES50 advanced features fundamentals
(MIB) that provides a standard presentation of the information controlled by
the agent. SNMP defines both the format of the MIB specifications and the
protocol used to access this information over the network.
The switch includes an onboard agent that supports SNMP versions 1,
2c, and 3 clients. This agent continuously monitors the status of the
switch hardware, as well as the traffic passing through its ports. A network
management station can access this information by using management
software such as the Element Manager. Access to the onboard agent from
clients using SNMP version 1 and version 2c is controlled by community
strings. To communicate with the switch, the management station must first
submit a valid community string for authentication.
Access to the switch from clients using SNMP version 3 provides additional
security features that cover message integrity, authentication, and
encryption; as well as controlling user access to specific areas of the MIB
tree.
The SNMP version 3 security structure consists of security models, with
each model having its own security levels. Three security models are
defined, SNMP version 1, SNMP version 2c, and SNMP version 3. Users
are assigned to groups that are defined by a security model and specified
security levels. Each group also has defined security access to a set of
MIB objects for reading and writing, which are known as views. The switch
has a default view (all MIB objects) and default groups defined for security
models v1 and v2c.

Local engine ID

An SNMP version 3 engine is an independent SNMP agent that resides
on the switch. This engine protects against message replay, delay, and
redirection. The local engine ID is also used in combination with user
passwords to generate the security keys for authenticating and encrypting
SNMP version 3 packets.
If the local default engine ID is deleted or changed, all SNMP users are
cleared and all existing users must be reconfigured.

Remote engine ID

To send inform messages to an SNMP version 3 user on a remote device,
you must first specify the engine identifier for the SNMP agent on the remote
device where the user resides. The remote engine ID is used to compute
the security digest for authenticating and encrypting packets sent to a user
on the remote host.
Copyright © 2006, Nortel Networks
.
SMB
Using the Nortel Business Ethernet Switch 50 Series
NN47924-301 01.01 Standard
1.00 October 2006
Nortel Networks Confidential