Table 177 – Brocade 6910 Ethernet Access Switch Configuration Guide (Supporting R2.2.0.0) User Manual

Page 1008

Advertising
background image

952

Brocade 6910 Ethernet Access Switch Configuration Guide

53-1002651-02

43

Simple Network Management Protocol

The SNMPv3 security structure consists of security models, with each model having it’s own
security levels. There are three security models defined, SNMPv1, SNMPv2c, and SNMPv3. Users
are assigned to “groups” that are defined by a security model and specified security levels. Each
group also has a defined security access to set of MIB objects for reading and writing, which are
known as “views.” The switch has a default view (all MIB objects) and default groups defined for
security models v1 and v2c. The following table shows the security models and levels available and
the system default settings.

NOTE

The predefined default groups and view can be deleted from the system. You can then define
customized groups and views for the SNMP clients that require access.

Command Usage
Configuring SNMPv1/2c Management Access

To configure SNMPv1 or v2c management access to the switch, follow these steps:

1. Use the Administration > SNMP (Configure Global) page to enable SNMP on the switch, and to

enable trap messages.

2. Use the Administration > SNMP (Configure User - Add Community) page to configure the

community strings authorized for management access.

TABLE 177

SNMPv3 Security Models and Levels

Model

Level

Group

Read View

Write View

Notify View

Security

v1

noAuthNoPriv public

(read only)

defaultview

none

none

Community string
only

v1

noAuthNoPriv

private
(read/write)

defaultview

defaultview

none

Community string
only

v1

noAuthNoPriv

user defined

user defined

user defined

user defined

Community string
only

v2c

noAuthNoPriv

public
(read only)

defaultview

none

none

Community string
only

v2c

noAuthNoPriv

private
(read/write)

defaultview

defaultview

none

Community string
only

v2c

noAuthNoPriv

user defined

user defined

user defined

user defined

Community string
only

v3

noAuthNoPriv

user defined

user defined

user defined

user defined

A user name match
only

v3

AuthNoPriv

user defined

user defined

user defined

user defined

Provides user
authentication via
MD5 or SHA
algorithms

v3

AuthPriv

user defined

user defined

user defined

user defined

Provides user
authentication via
MD5 or SHA
algorithms and data
privacy using DES
56-bit encryption

Advertising