Create A Community; Setting Up User-Based Security (Snmpv3) - Dell Force10 MXL Blade Configuration Manual

Create a Community

For SNMPv1 and SNMPv2, you must create a community to enable the community-based security in
FTOS. The management station generates requests to either retrieve or alter the value of a management
object and is called the
SNMP agent
Communities are necessary to secure communication between SNMP managers and agents; SNMP agents
do not respond to requests from management stations that are not part of the community.
FTOS enables SNMP automatically when you create an SNMP community and displays
must specify whether members of the community may only retrieve values (read), or retrieve and alter
values (read-write).
To create an SNMP community:
Task
Choose a name for the community.
Message 1 SNMP Enabled
22:31:23: %STKUNIT0-M:CP %SNMP-6-SNMP_WARM_START: Agent Initialized - SNMP WARM_START.
View your SNMP configuration, using the command
mode, as shown in
Figure 30-1. Creating an SNMP Community
FTOS(conf)#snmp-server community my-snmp-community ro
22:31:23: %STKUNIT0-M:CP %SNMP-6-SNMP_WARM_START: Agent Initialized - SNMP WARM_START.
FTOS#do show running-config snmp
!
snmp-server community mycommunity ro
FTOS#

Setting Up User-based Security (SNMPv3)

When setting up SNMPv3, you can set users up with one of the following three types of configuration for
SNMP read/write operations. Users are typically associated to an SNMP group with permissions provided,
such as OID view.
• noauth: no password or privacy. Select this option to set a user up with no password or privacy
privileges. This is the basic configuration. Users must have a group and profile that do not require
password privileges.
• auth: password privileges. Select this option to set up an user with password authentication
• priv: password and privacy privileges. Select this option to set up a user with password and privacy
privileges.
518
| Simple Network Management Protocol (SNMP)
SNMP manager
. An is a group of SNMP agents and managers that are allowed to interact.
SNMP community
Command
snmp-server community name
Figure 30-1.
. A network element that processes SNMP requests is called an
show running-config snmp
Message
Command Mode
{ ro | rw }
CONFIGURATION
from EXEC Privilege
1. You