Trusted Managers - AudioCodes Mediant 1000 User Manual

Set up the EM such that subsequent set requests use the new community string,
2.
v2mgr.
If v2admin is being used as the trap community string, follow the procedure to change
3.
the trap community string. (See below.)
Follow the procedure above to delete a read-write community name in the row for
4.
v2admin.
To change the trap community string, take these 2 steps:
The following procedure assumes that a row already exists in the srCommunityTable for
the new trap community string. The trap community string can be part of the TrapGroup,
ReadGroup or ReadWriteGroup. If the trap community string is used solely for sending
traps (recommended), then it should be made part of the TrapGroup.
Add a row to the vacmSecurityToGroupTable with these values: SecurityModel=2,
1.
SecurityName=the new trap community string, GroupName=TrapGroup, ReadGroup
or ReadWriteGroup. The SecurityModel and SecurityName objects are row indices.
Note:
Modify the SecurityName field in the appropriate row of the snmpTargetParamsTable.
2.
8.1.5.2

Trusted Managers

By default, the agent accepts get and set requests from any IP address, as long as the
correct community string is used in the request. Security can be enhanced via the use of
Trusted Managers. A Trusted Manager is an IP address from which the SNMP agent
accepts and process get and set requests. An EM can be used to configure up to 5 Trusted
Managers.
Note:
8.1.5.2.1 Configuration of Trusted Managers via ini File
To set the Trusted Mangers table from start up, write the following in the ini file:
SNMPTRUSTEDMGR_X = D.D.D.D
Where X is any integer between 0 and 4 (0 sets the first table entry, 1 sets the second and
so on), and D is an integer between 0 and 255.
8.1.5.2.2 Configuration of Trusted Managers via SNMP
To configure Trusted Managers, the EM must use the srCommunityMIB, the
snmpTargetMIB and the TGT-ADDRESS-MASK-MIB.
User's Manual
You must add GroupName and RowStatus on the same set.
If Trusted Managers are defined, then all community strings works from all
Trusted Managers. That is, there is no way to associate a community string
with particular trusted managers.
126
Digital Mediant 1000
Document # LTRT-66401