Kerberos Configuration; Snmp Configuration - Symbol WS5000 Series System Reference Manual

3-6
WS5000 Series Switch System Reference Guide

3.3.4 Kerberos Configuration

The Wireless Switch features a built-in kerberos KDC, for authentication services, a site may require settings
for configuring kerberos functionality. The settings in the command file for configuring the KDC include primary
or slave status, hostname, IP address, realm and domain. When applicable, up to three NTP (Network Time
Protocol) servers can be specified. A list of all available Kerberos actions is included in the command file.
Table 3.4 Kerberos Configuration Section
Option Value
NTPServer1 <NTP xxx.xxx.xx.xx>
NTPServer2 <NTP xxx.xxx.xx.xx>
NTPServer3 <NTP xxx.xxx.xx.xx>
KDCRealm <KDC realm name>
KDCInterface <KDC interface
name>
KDCBackupHostname <xxx.xxx.xx.xx>
KDCBackupIP <xxx.xxx.xx.xx>
KDCBackupDomain <server name>
Note All Security Policies which are configured for Kerberos Authentication will automatically
be populated with the Master/Slave/Remote server's IP addresses if present in this file.

3.3.5 SNMP Configuration

The SNMP section of the command file contains settings for community attributes and trap actions, used by
SNMP-based network management tools to get/set MIB variables to configure the Wireless Switch along with
gathering and monitoring device status.
Table 3.5 SNMP Configuration
Option
SNMPCommunity[1-4]
SNMPCommunity[1-4]IP
Notes
NTP server IP address (for the on-board KDC server). The
primary and standby switches need to be defined with the
same NTP service host to insure that the time source is
consistent.
Second alternate NTP server IP address.
Third alternate NTP server IP address or name.
Kerberos realm name
The interface on which the KDC is configured (1 or 2).
Hostname of the backup slave.
IP address for the backup slave. If this IP address belongs
to any of the ethernet ports and the hostnames match, the
switch is configured as a slave KDC.
Kerberos Master Hostname where the KDC resides.
Value Notes
<string>
This is the SNMP community for the designated
group selection of [1..4]
<ip_address>
SNMP community IP address.