Table 28: Snmpv3 Security Models And Levels - Edge-Core ECS4620-28T Quick Start Manual

Table 28: SNMPv3 Security Models and Levels

Model Level Group
v1 noAuthNoPriv public
(read only)
v1 noAuthNoPriv private
(read/write)
v1 noAuthNoPriv user defined
v2c noAuthNoPriv public
(read only)
v2c noAuthNoPriv private
(read/write)
v2c noAuthNoPriv user defined
v3 noAuthNoPriv user defined
v3 AuthNoPriv user defined
v3 AuthPriv user defined
and SNMPv3. Users are assigned to "groups" that are defined by a security model
and specified security levels. Each group also has a defined security access to set of
MIB objects for reading and writing, which are known as "views. " The switch has a
default view (all MIB objects) and default groups defined for security models v1 and
v2c. The following table shows the security models and levels available and the
system default settings.
Read View Write View
defaultview none
defaultview defaultview
user defined user defined
defaultview none
defaultview defaultview
user defined user defined
user defined user defined
user defined user defined
user defined user defined
Note: The predefined default groups and view can be deleted from the system.
You can then define customized groups and views for the SNMP clients that require
access.
Command Usage
Configuring SNMPv1/2c Management Access
To configure SNMPv1 or v2c management access to the switch, follow these steps:
1.
Use the Administration > SNMP (Configure Global) page to enable SNMP on the
switch, and to enable trap messages.
2.
Use the Administration > SNMP (Configure User - Add Community) page to
configure the community strings authorized for management access.
3.
Use the Administration > SNMP (Configure Trap) page to specify trap managers
so that key events are reported by this switch to your management station.
Chapter 13
Notify View Security
none Community string only
none Community string only
user defined Community string only
none Community string only
none Community string only
user defined Community string only
user defined A user name match only
user defined Provides user authentication via MD5 or SHA
algorithms
user defined Provides user authentication via MD5 or SHA
algorithms and data privacy using DES 56-
bit encryption
– 421 –
| Basic Administration Protocols
Simple Network Management Protocol