Brocade Multi-Service IronWare Security Configuration Guid Manual de usuario descargar pdf (Pagina 356)

338 Multi-Service IronWare Security Configuration Guide

53-1003035-02

Using the User-Based Security model

Configuring your NMS

To be able to use the SNMP version 3 features.

1. Make sure that your Network Manager System (NMS) supports SNMP version 3.

2. Configure your NMS agent with the necessary users.

3. Configure the SNMP version 3 features in the device.

Configuring SNMP version 3 on the device

To configure SNMP version 3 on the device, perform the tasks listed below.

1. Enter an engine ID for the management module using the snmp-server engineid command if

you will not use the default engine ID. Refer to “Defining the engine ID”.

2. Create views that will be assigned to SNMP user groups using the snmp-server view command.

Refer to the “Defining SNMP views” for details.

3. Create ACL groups that will be assigned to SNMP user groups using the access-list command.

Refer to the Multi-Service IronWare Administration Guide for details.

4. Create user groups using the snmp-server group command. Refer to “Defining an SNMP

group”.

5. Create user accounts and associate these accounts to user groups using the snmp-server user

command. Refer to “Defining an SNMP user account”.

If SNMP version 3 is not configured, then community strings by default are used to authenticate

access.

Even if SNMP version 3 users are configured on the device, the system will still accept SNMP

version 1, 2c and 3 PDUs from the remote manager.

Defining the engine ID

A default engine ID is generated during system start up.The format of the default engine ID is

derived from RFC 2571 (Architecture for SNMP frameworks) within the MIB description for object

SnmpEngineID.

To determine what the default engine ID of the device is, enter the show snmp engineid command

and find the following line.

Local SNMP Engine ID: 800007c70300e05290ab60

Refer to the section “Displaying the engine ID” for details.

The default engine ID guarantees the uniqueness of the engine ID for SNMP version 3. If you want

to change the default engine ID, enter a command such as the following.

Brocade(config)# snmp-server engineid local 800007c70300e05290ab60

Syntax: [no] snmp-server engineid local hex-string

The local parameter indicates that engine ID to be entered is the ID of this device, representing an

SNMP management entity.

1 2 ... 351 352 353 354 355 356 357 358 359 360 361 ... 369 370

Sin comentarios

Brocade Multi-Service IronWare Security Configuration Guid Manual de usuario Pagina 356