beautypg.com

Securing snmp access, Establishing snmp community strings, Chapter 10 – Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) User Manual

Page 353: Chapter

background image

Multi-Service IronWare Security Configuration Guide

335

53-1003035-02

Chapter

10

Securing SNMP Access

Table 56

displays the individual Brocade devices and the SNMPv3 features they support.

Simple Network Management Protocol (SNMP) is a set of protocols for managing complex
networks. SNMP sends messages, called protocol data units (PDUs), to different parts of a
network. An SNMP-compliant device, called an agent, stores data about itself in Management
Information Bases (MIBs) and SNMP requesters or managers.

NOTE

SNMP agent is disabled by default. Use the snmp-server command to enable the agent.

Establishing SNMP community strings

SNMP versions 1 and 2c use community strings to restrict SNMP access. The default passwords for
SNMP access are the SNMP community strings configured on the device:

TABLE 56

Supported Brocade SNMPv3 features

Features
supported

Brocade
NetIron XMR
Series

Brocade
MLX Series

Brocade
NetIron CES
2000 Series
BASE
package

Brocade
NetIron CES
2000 Series
ME_PREM
package

Brocade
NetIron CES
2000 Series
L3_PREM
package

Brocade
NetIron CER
2000
Series Base
package

Brocade
NetIron CER
2000 Series
Advanced
Services
package

SNMP v3

Yes

Yes

Yes

Yes

Yes

Yes

Yes

User-Based
Security Mode

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Community
Strings to
Authenticate
SNMP Access

Yes

Yes

Yes

Yes

Yes

Yes

Yes

New
encryption
code for
passwords,
authentication
keys, and
community
strings

Yes

Yes

No

No

No

No

No

Defining an
SNMP User
Account

Yes Yes

No

No

No

No

No

AES for
SNMPv3

Yes Yes

Yes Yes Yes Yes

Yes