H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 296)

281
Figure 87 MIB tree
SNMP provides the following four basic operations:
• Get—The NMS retrieves SNMP object nodes in an agent MIB.
• Set—The NMS modifies the value of an object node in the agent MIB.
• Trap—The SNMP agent sends traps to report events to the NMS.
• Inform—The NMS sends alarms to other NMSs.
SNMP protocol versions
H3C SNMP agents support three SNMP protocol versions: SNMPv1, SNMPv2c, and SNMPv3.
• SNMPv1 uses community names for authentication. A community name performs a similar role as
a password to regulate access from the NMS to the agent. If the community name provided by the
NMS is different from the community name set on the agent, the SNMP connection cannot be
established and the NMS fails to access the agent.
• SNMPv2c uses community names for authentication. SNMPv2c is compatible with SNMPv1, but it
provides more operation modes, supports more data types, and provides various error codes for
troubleshooting.
• SNMPv3 offers authentication based on the User-based Security Model (USM), which allows
network administrators to set authentication and privacy functions. The authentication function is
used to authenticate the validity of the sending end of the authentication packets, preventing access
of unauthorized users. The privacy function is used to encrypt packets between the NMS and agents,
preventing the packets from being intercepted. USM ensures more secure communication between
NMSs and agents by providing authentication and privacy functions.
Successful interaction between an NMS and the agents requires consistency of SNMP versions
configured on them.
SNMP configuration task list
Complete the following tasks to configure SNMP:
Task Remarks
Configuring SNMP basic parameters Required
Configuring SNMP logging Optional
Configuring SNMP traps Optional
A
2
6
1
5
2 1
1
2
1
B