Handbook

Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 11
SNMP v1.0
To access the SNMP agent on the switch, the read and write community strings on the SNMP manager
should be configured to match those on the switch. The default read community string on the switch is
public and the default write community string is private.
The read and write community strings on the switch can be changed using the following commands on
the CLI.
>> /cfg/sys/ssnmp/rcomm
and
>> /cfg/sys/ssnmp/wcomm
The SNMP manager should be able to reach the management interface or any one of the IP interfaces
on the switch.
For the SNMP manager to receive the traps sent out by the SNMP agent on the switch, the trap host on
the switch should be configured with the following command:
/cfg/sys/ssnmp/snmpv3/taddr
For more details, see ―Configuring SNMP trap hosts‖.
SNMP v3.0
SNMPv3 is an enhanced version of the Simple Network Management Protocol, approved by the Internet
Engineering Steering Group in March, 2002. SNMP v3.0 contains additional security and authentication
features that provide data origin authentication, data integrity checks, timeliness indicators, and
encryption to protect against threats such as masquerade, modification of information, message stream
modification, and disclosure.
SNMP v3 ensures that the client can use SNMP v3 to query the MIBs, mainly for security.
To access the SNMP v3.0 menu, enter the following command in the CLI:
>> # /cfg/sys/ssnmp/snmpv3
For more information on SNMP MIBs and the commands used to configure SNMP on the switch, see the
Command Reference Guide.
Default configuration
The switch software has two users by default. Both the users 'adminmd5' and 'adminsha' have access to all
the MIBs supported by the switch.
1. username 1: adminmd5/password adminmd5. Authentication used is MD5.
2. username 2: adminsha/password adminsha. Authentication used is SHA.
3. username 3: v1v2only/password none.
To configure an SNMP user name, enter the following command from the CLI:
>> # /cfg/sys/ssnmp/snmpv3/usm 6
User configuration
Users can be configured to use the authentication/privacy options. Currently we support two
authentication algorithms: MD5 and SHA. These can be specified using the command:
/cfg/sys/ssnmp/snmpv3/usm <x>/auth md5|sha
1. To configure a user with name 'test,' authentication type MD5, and authentication password of 'test,'
privacy option DES with privacy password of 'test,' use the following CLI commands:
>> # /cfg/sys/ssnmp/snmpv3/usm 5
>> SNMPv3 usmUser 5 # name "test"
>> SNMPv3 usmUser 5 # auth md5
>> SNMPv3 usmUser 5 # authpw test
>> SNMPv3 usmUser 5 # priv des
>> SNMPv3 usmUser 5 # privpw test