Table 33: Snmpv3 Security Models And Levels - Edge-Core ECS4660-28F Management Manual

Table 33: SNMPv3 Security Models and Levels

Model Level Group
v1 noAuthNoPriv public
(read only)
v1 noAuthNoPriv private
(read/write)
v1 noAuthNoPriv user defined
v2c noAuthNoPriv public
(read only)
v2c noAuthNoPriv private
(read/write)
v2c noAuthNoPriv user defined
v3 noAuthNoPriv user defined
v3 AuthNoPriv user defined
v3 AuthPriv user defined
as well as the traffic passing through its ports. A network management
station can access this information using network management software.
Access to the onboard agent from clients using SNMP v1 and v2c is
controlled by community strings. To communicate with the switch, the
management station must first submit a valid community string for
authentication.
Access to the switch from clients using SNMPv3 provides additional security
features that cover message integrity, authentication, and encryption; as
well as controlling user access to specific areas of the MIB tree.
The SNMPv3 security structure consists of security models, with each
model having it's own security levels. There are three security models
defined, SNMPv1, SNMPv2c, and SNMPv3. Users are assigned to "groups"
that are defined by a security model and specified security levels. Each
group also has a defined security access to set of MIB objects for reading
and writing, which are known as "views." The switch has a default view (all
MIB objects) and default groups defined for security models v1 and v2c.
The following table shows the security models and levels available and the
system default settings.
Read View Write View
defaultview none
defaultview defaultview
user defined user defined
defaultview none
defaultview defaultview
user defined user defined
user defined user defined
user defined user defined
user defined user defined
The predefined default groups and view can be deleted from the
N :
OTE
system. You can then define customized groups and views for the SNMP
clients that require access.
– 481 –
| Basic Administration Protocols
C 14
HAPTER
Simple Network Management Protocol
Notify View Security
none Community string only
none Community string only
user defined Community string only
none Community string only
none Community string only
user defined Community string only
user defined A user name match only
user defined Provides user authentication via MD5 or
SHA algorithms
user defined Provides user authentication via MD5 or
SHA algorithms and data privacy using
DES 56-bit encryption