Snmpv3" Tab; Connection To The Snmp Agent; Authentication; Encryption (Optional) - Stormshield SN series Configuration Manual

SNMP can now be configured so that the name of the firewall instead of its serial number is
used for SysName.

"SNMPv3" tab

The options Enable the agent SNMPv3 (recommended) or SNMPv1/v2c et SNMPv3 allow
enabling the SNMP v3 module.

Connection to the SNMP agent

Username

Authentication

Password
Algorithm

Encryption (optional)

Password
Algorithm

Sending of SNMPv3 alerts (traps)

Sending traps to hosts consists of 2 parts, with the list of hosts on the left and details of a
selected host on the right.
List of SNMP servers
In this screen, you can configure the stations that need to contact the firewall when it needs to
send an SNMP Trap (event). If no stations (hosts) are specified, the firewall will not send any
messages.
A wizard will guide you through the configuration of the hosts.
By clicking to the right of a host name, the objects database will appear, allowing you to select a
host.
Server [Name of destination server (object)]
The parameters in the configuration of SNMP V3 events are as follows:
Port
Page 311/448
NOTE
Username used for the connection and for looking up MIBs on the firewall.
Password of the user who will look up MIBs.
Two authentication methods are available, MD5 (hash algorithm that calculates a 128-
bit digest) and SHA1 (hash algorithm that calculates a 160-bit digest). By default MD5
will be used for authentication.
SNMP packets are encrypted in DES or AES, and an encryption key can be defined. By
default the authentication key will be used.
Warning
You are strongly advised to use a specific key.
The two encryption methods possible are DES and AES. By default DES is used for
encryption.
Port used for sending data to the host (snmptrap by default).
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNMP AGENT