| Hide_comments |
|---|
SNMP protocol version 1 and 3 daemon
Syntax:
...
| Scroll Ignore | |
|---|---|
|
Description
This command enables/disables the SNMP daemon (Simple Network Management Protocol) version 1, 2c and 3.
SNMP protocol support is an important feature of all communication devices, it allows system administrator to use a uniform mechanism to manage the operation of a whole network and it's components separately.
Although versions 1 and 2c of the SNMP protocol lack security in the operation of the protocol itself, which hinders it's use for network management, it is widely used to monitor and analyze network operation.
Support of SNMP V3 with USM (User-based Security Model), MD5 authentication and confidentiality mode are also available. For access granting, a user account with username, access passwords and access rights (with or without authentication and confidentiality) is created.
SNMP daemon implementation supports MIB-II, as well as private MIBs.
Syntax:
| Code Block | ||||
|---|---|---|---|---|
| ||||
user NAME (add|set) [pass PASSWORD] [sec[urity] (noAuthNoPriv|authNoPriv|authPriv)] [acc[essRights] (readOnly|readWrite)] [cla[ss] (guest|admin)] [privpass PRIVPASS] |
...
user NAME del[ete] |
...
comm[unity] NAME |
...
(nodebug|debug [prox] [trap] [stat] [mibs] [user] [cryp] [ |
...
time] [flow]) |
...
(v1disable|v1enable) |
...
# SNMPv1 and SNMPv2c disable/enable (start|stop) |
...
snmpd clear
This command enables/disables the SNMP (Simple Network Management Protocol) Version 1 and 3 daemon.
SNMP protocol support is an important feature of all communication devices because it allows the system administrator to use a uniform mechanism to manage the operation of a network as a whole and of every its component individually.
Although the first version of the SNMP protocol lacks security in the operation of the protocol itself, which hinders its use for network management, it is widely used to monitor and analyze network operation. MIB variables changing are turned off for the first version; it works only in read-only mode. "v1disable" option disables 1st version support completely and slightly fastens incoming SNMP-requests processing.
Support of SNMP-V3 with USM (User-based Security Model), MD5 authentication and encoding are also available. For access granting, a user with username, access passwords and access rights (with or without authentication and encoding) is created.
In “snmpd” command "accessRights" can be set to provide access management of the recourses. "ReadOnly|readWrite" parameters allow only reading or also changing some variables. "Class guest/admin" allows providing limited or full access to the variables.
...
clear |
Parameters
| Center | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
...
| Code Block | ||||
|---|---|---|---|---|
| ||||
| snmpd comm secret
|
The present implementation supports MIB II (Management Information Base, Version II) and MIB Enterprise and is very easy to configure.
The following SNMP security options can be used by setting the “sec[urity]” parameter:
- "noAuthNoPriv" – SNMP messages are sent unauthenticated and unencoded.
- "authNoPriv" – SNMP messages are sent authenticated and unencoded.
- "authPriv" – SNMP messages are sent authenticated and encoded. The passphrase for the encoding is set by the “privpass PRIVPASS” parameter. The protocol is set by the “proto (<privacy protocol>)” parameter.
The “nodebug/debug” options disables/enables printing of SNMP service information into the system log.
The “snmpd clear” command deletes SNMP configuration on the unit.
Example,
|
Examples
Set the password "mypassword" for user "john" and select second level of security with authentication but without confidentiality.
|
...