Configuring Snmpv3 Users With Vacm - Network Critical SmartNA-X User Manual

U SNMP | C SNMP
SING ONFIGURING
• Notification type – Specify whether notifications may be sent as traps or (where supported) informs.
• Credentials – For SNMP v1 or v2c, this is the community string to send with the notification. For SNMP
v3, this is an existing local user (for traps) or remote user (for informs).
• Engine ID – Specify the corresponding engine ID where a remote user is specified.
Click Add host to finish setting up the notification host.
5.
Click Review/apply and review the changes you have made, and then click Apply to implement your changes
6.
on the system.
Using the CLI to configure notifications hosts (trap managers)
In the CLI, use the snmp create host command to configure SNMP notifications hosts. For example, to create a
notification host for 192.168.0.3 for SNMPv3 user1 (user1 must already exist), enter the following commands:
CONTROLLER>snmp create host 192.168.0.3 v3 user1
CONTROLLER>snmp apply
See page 161

Configuring SNMPv3 users with VACM

SmartNA-X uses VACM for identification and access control when connecting with SNMPv3. VACM allows for
much more flexibility in both user configuration and view configuration than is available with the SNMPv1/2c
community string mechanism, not to mention robust privacy and authentication mechanisms. VACM can also
deal with cases where a client wants to connect using an older version of SNMP, but the access control on the
SmartNA-X device is configured using VACM. In this case, the community string is mapped onto a "security
name" that is then added into groups, just like native SNMPv3 users.
Using the web UI to configure SNMPv3 users
Log in to SmartNA-X as Administrator.
1.
Click on the chassis and select the SNMP tab.
2.
Under "View-based access control", click Configure users. The "SNMP Users" settings window appears.
3.
Click Add new user to add a new user, or click
4.
window appears.
Select user settings from the following fields:
5.
• User name – Specify a name for the user. Names consist of 1–32 alphanumeric characters, and must begin
with a letter.
• Engine – (Optional) You may define local users (for most uses) and remote users (for use with sending
SNMPv3 informs). If this is a remote user, you must also specify the corresponding remote engine ID. An
engine ID consists of 10–64 hex digits.
• Authentication – (Optional) You may specify whether authentication is to be used, and if so whether to use
MD5 or SHA. If authentication is in use, you must also specify a passphrase. Authentication phrases must be
8–64 ASCII characters (control characters are allowed) with no spaces. For users already set up on the device,
either enter a new passphrase if you wish to make a change or leave this field blank to keep the existing
passphrase.
for information on the snmp create host command.
S NA™ 10G N
MART
to edit an existing user. The "Add/Edit SNMP Users"
DRAFT
A (S NA-X)
ETWORK CCESS MART
65