Advertisement
Enable SNMPv3
4 Set the SNMP v1/v2 Community String configuration. Use the + Add Row function as needed to add
additional SNMP v1/2 community strings, or select an existing community string's radio button and
select the Delete icon to remove it.
Community
Access Control
5 Set the SNMPv3 Users configuration. Use the + Add Row function as needed to add additional SNMP
v3 user configurations, or select a SNMP user's radio button and select the Delete icon to remove the
user.
User Name
Authentication
Encryption
Password
6 Select OK to update the SNMP configuration. Select Reset to revert to the last saved configuration.
SNMP Trap Configuration
"Management Access Policy Configuration"
An access point can use SNMP trap receivers for fault notifications. SNMP traps are unsolicited
notifications triggered by thresholds (or actions) on devices, and are therefore an important fault
management tool.
A SNMP trap receiver is the SNMP message destination. A trap is like a Syslog message, just over
another protocol (SNMP). A trap is generated when a device consolidates event information and
transmits the information to an external repository. The trap contains several standard items, such as the
SNMP version, community etc.
SNMP trap notifications exist for most operations, but not all are necessary for day-to-day operation.
To define a SNMP trap configuration for receiving events at a remote destination:
TM
Altitude
4000 Series Access Point System Reference Guide
Select the checkbox to enable SNMPv3 support. SNMPv3 adds security
and remote configuration capabilities to previous versions. The SNMPv3
architecture introduces the User-based Security Model (USM) for
message security and the View-based Access Control Model (VACM) for
access control. The architecture supports the concurrent use of different
security, access control and message processing techniques. SNMPv3 is
enabled by default.
Define a public or private community designation. By default, SNMPv2
community strings on most devices are set to public for the read-only
community string and private for the read-write community string.
Set the access permission for each community string used by devices to
retrieve or modify information. The available options include:
Read Only -Allows a remote device to retrieve information
Read-Write - Allows a remote device to modify settings
Use the drop down menu to define a user name of either snmpmanager,
snmpoperator or snmptrap.
Displays the authentication scheme used with the listed SNMPv3 user.
The listed authentication scheme ensures only trusted and authorized
users and devices are permitted access.
Displays the encryption scheme used with the listed SNMPv3 user. The
listed encryption scheme ensures data is protected when forwarded over
insecure interfaces like HTTP.
Provide the user's password in the field provided. Select the Show radio
button to display the actual character string used in the password.
Leaving the radio button unselected protects the password and displays
each character as "*".
SNMP Trap Configuration
377
Advertisement
