SNMP Configuration and Management Manual

Installing and Configuring the SNMP Agent
SNMP Configuration and Management Manual—424777-006
2-31
Authenticating Requests Received Using the IPC
Interface
In Figure 2-5, the authentication table permits the SNMP agent to accept Get and
GetNext requests from any SNMP manager belonging to the “public” community, as
well as Set requests sent under the “Private” community from the SNMP manager
whose address is 130.252.15.230. The SCF commands that defined this nondefault
PROFILE object are:
ASSUME PROCESS $ZSNMP
ADD PROFILE #UBLAN, COMMUNITY Private,&
ACCESS READWRITE, HOSTADDR 130.253.15.230
START PROFILE #UBLAN
This request would be authenticated.
Note that the trap messages shown in Figure 2-5 are generated only when:
•
A message is received that fails authentication.
•
The snmpEnableAuthenTraps object in the SNMP group of the SNMP agent’s MIB
is set to 1.
Refer to Configuring Trap Destinations on page 2-38 for more information on traps.
Authenticating Requests Received Using the IPC Interface
Requests received using the IPC interface are authenticated as follows:
•
The community name and Internet address in the request are not examined.
(However, they are passed to the subagent to which the request is forwarded; the
subagent can then employ additional security based on the community name and
Internet address.)
•
All MIB objects under the control of the SNMP agent are accessible. Requests for
operations on objects in the zagInProfile group are performed only if the PAID of
the SNMP manager process is compatible with the PAID of the agent process. If
the agent process is associated with the super user group (user ID 255,n), the
SNMP manager process must also be associated with the super user group. If the
agent process is not associated with the super user group, the PAID of the SNMP
manager process is irrelevant.
•
Requests for MIB objects under the control of subagent are passed to subagents
for processing, as described in the following subsection.
After a Request Has Been Authenticated
Authentication allows the SNMP manager access to the following SNMP agent
services:
•
Access to the MIB-II SNMP and System group objects, as well as the private MIB
objects supported by the SNMP agent. These requests are processed by the
SNMP agent.
•
The forwarding of SNMP requests concerning MIB objects supported by subagents
to the appropriate subagent process.