Setting Snmpv3 Community Access Strings; Configuring Snmpv3 Users - AMX NXA-ENET8-2POE Operation/Reference Manual

Configuring the NXA-ENET8-2POE
2.
In the SNMP System Configuration table, set the Mode to Enabled to enable SNMP service on the switch,
specify the SNMP version to use, change the community access strings if required, and set the engine ID
if SNMP version 3 is used.
3.
In the SNMP Trap Configuration table, enable the Trap Mode to allow the switch to send SNMP traps.
Specify the trap version, trap community, and IP address of the management station that will receive trap
messages either as an IPv4 or IPv6 address.
a.
Select the trap types to issue, and set the trap inform settings for SNMP v2c or v3 clients.
b.
For SNMP v3 clients, configure the security engine ID and security name used in v3 trap and inform
messages.
4.
Click Save.

Setting SNMPV3 Community Access Strings

Use the SNMPv3 Community Configuration page to set community access strings.
All community strings used to authorize access by SNMP v1 and v2c clients should be listed in the SNMPv3
Communities Configuration table.
For security reasons, you should consider removing the default strings.
FIG. 45 SNMPv3 Community Configuration
SNMPv3 Community Configuration parameters
• Community
• Source IP
• Source Mask
1.
Click Configuration, Security, Switch, SNMP, Communities.
2.
Set the IP address and mask for the default community strings. Otherwise, you should consider deleting
these strings for security reasons.
3.
Add any new community strings required for SNMPv1 or v2 clients that need to access the switch, along
with the source address and address mask for each client.
4.
Click Save.

Configuring SNMPV3 Users

Use the SNMPv3 User Configuration page to define a unique name and remote engine ID for each SNMPv3
user. Users must be configured with a specific security level, and the types of authentication and privacy
protocols to use.
FIG. 46 SNMPv3 User Configuration
58
Specifies the community strings which allow access to the SNMP agent. (Range:
1-32 characters, ASCII characters 33-126 only; Default: public, private)
For SNMPv3, these strings are treated as a Security Name, and are mapped as
an SNMPv1 or SNMPv2 community string in the SNMPv3 Groups Configuration
table (see the Configuring SNMPV3 Groups section on page 59).
Specifies the source address of an SNMP client.
Specifies the address mask for the SNMP client.
NXA-ENET8-2POE Gigabit Ethernet Layer 2 PoE Switch