SNMP Configuration and Management Manual

Installing and Configuring the SNMP Agent
SNMP Configuration and Management Manual—424777-006
2-28
Authenticating Requests Received Over TCP/IP
Internet Addresses
Each entry in the authentication table contains a single Internet address or a full wild-
card address (0.0.0.0.) specification. Internet addresses are discussed in detail in the
TCP/IP Configuration and Management Manual.
When the SNMP agent finds a community name match, the SNMP agent looks at the
address from which the request originated. If the address contained in the incoming
request matches the address in the authentication table entry, the SNMP agent
accepts the request.
If the SNMP agent does not find a matching Internet address entry in the
authentication table, the request is dropped. If configured to do so, the SNMP agent
sends an authenticationFailure trap to all trap destinations.
SNMP Operations
The authentication table also describes the SNMP operations authorized for each
community. Allowable SNMP operations are described by one of two access modes,
specified as ACCESS attributes in SCF: READONLY and READWRITE.
•
If the access mode is READONLY, the SNMP agent accepts GetRequest and
GetNextRequest PDUs from the SNMP manager. SetRequest PDUs are dropped.
•
If the access mode is READWRITE, the SNMP agent accepts SetRequest,
GetRequest, and GetNextRequest PDUs from the SNMP manager.
If the request is for an unauthorized operation, the request is dropped. If configured to
do so, the SNMP agent sends an authenticationFailure trap to all trap destinations.
If the request passes all three tests (community name, Internet address, and access
mode), the SNMP agent is said to have authenticated the request.
Configuring the Authentication Table
An authentication table entry has the following attributes:
•
You name the object when you define it.
•
COMMUNITY or zagInPfCommunity is a community name, unique among
authentication table entries.
•
HOSTADDR or zagInPfHostAddr is an SNMP manager Internet address.
SCF SNMP Agent Private MIB
Object Attribute Table Object Within Table Row
PROFILE #profile-name zagInProfileTable zagInPfName
COMMUNITY zagInPfCommunity
HOSTADDR zagInPfHostAddr
ACCESS zagInPfAccess