Understanding Snmpv3; Benefits; Snmp Entity - Cisco WS-C4003 - Catalyst 4000 Chassis Switch Software Configuration Manual

Chapter 23 Configuring SNMP
read-write-all
Trap-Rec-Address
----------------------------------------
172.16.10.10
172.16.10.20
Console> (enable)
Note To disable access for an SNMP community, set the community string for that community to the null
string (do not enter a value for the community string).

Understanding SNMPv3

SNMPv3 cpntains all the functionality of SNMPv1 and SNMPv2, but SNMPv3 has significant
enhancements to adminstration and security. SNMPv3 is an interoperable standards-based protocol.
SNMPv3 provides secure access to devices by authenticating and encrypting packets over the network.
The security features provided in SNMPv3 are as follows:
•
•
•

Benefits

SNMPv3 provides the following benefits for managing your network:
•
•

SNMP Entity

In SNMPv3, the terms SNMP Agents and SNMP Managers are no longer used. These concepts have been
combined into what is called an SNMP entity. An SNMP entity is made up of an SNMP engine and
SNMP applications. An SNMP engine is made up of four components, as shown in
•
•
•
•
78-12647-02
Root
Message integrity—Ensuring that a packet has not been tampered with in transit
Authentication—Determining the message is from a valid source
Encryption—Scrambling contents of packet to prevent it from being seen by an unauthorized source
SNMP devices can collect data securely without being tampered with or corrupted.
You can encrypt confidential information (such as SNMP set commands that change a router's
configuration) to prevent the contents from being exposed on the network.
Dispatcher
Message Processing Subsystem
Security Subsystem
Access Control Subsystem
Software Configuration Guide—Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4
Trap-Rec-Community
--------------------
read-write
read-write-all
Understanding SNMPv3
Figure 23-1:
23-7