Snmpv3 Security - Motorola PTP 600 series User Manual

User Guide: PTP 600 Series

SNMPv3 security

SNMP Engine ID
PTP 600 supports three different formats for SNMP Engine ID:
•
MAC address
•
IP address
•
Configurable text string
SNMPv3 security configuration is re-initialized when the SNMP Engine ID is changed.
User-based security model
PTP 600 supports the SNMPv3 user-based security model (USM) for up to 10 users,
with MD5, SHA-1, DES and (subject to the license key) AES protocols in the following
combinations:
•
No authentication, no privacy,
•
MD5, no privacy,
•
SHA-1, no privacy,
•
MD5, DES,
•
SHA-1, DES,
•
MD5, AES,
•
SHA-1, AES.
Use of AES privacy requires the PTP 600 AES upgrade described in
page 1-52. The ODU will allow the creation of users configured with AES privacy
protocol, regardless of license key. However, a user configured to use AES privacy
protocol will not be able to transmit and receive encrypted messages unless the
license key enables the AES capability.
View-based access control model
PTP 600 supports the SNMPv3 view-based access control model (VACM) with a single
context. The context name is the empty string. The context table is read-only, and
cannot be modified by users.
phn-0896_012v000
Jul 2010
4Gon www.4Gon.co.uk info@4gon.co.uk Tel: +44 (0)1245 808195 Fax: +44 (0)1245 808299
System management
AES license on
1-47