Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 356)

338 Multi-Service IronWare Security Configuration Guide
53-1003035-02
Using the User-Based Security model
10
Configuring your NMS
To be able to use the SNMP version 3 features.
1. Make sure that your Network Manager System (NMS) supports SNMP version 3.
2. Configure your NMS agent with the necessary users.
3. Configure the SNMP version 3 features in the device.
Configuring SNMP version 3 on the device
To configure SNMP version 3 on the device, perform the tasks listed below.
1. Enter an engine ID for the management module using the snmp-server engineid command if
you will not use the default engine ID. Refer to “Defining the engine ID” .
2. Create views that will be assigned to SNMP user groups using the snmp-server view command.
Refer to the “Defining SNMP views” for details.
3. Create ACL groups that will be assigned to SNMP user groups using the access-list command.
Refer to the Multi-Service IronWare Administration Guide for details.
4. Create user groups using the snmp-server group command. Refer to “Defining an SNMP
group” .
5. Create user accounts and associate these accounts to user groups using the snmp-server user
command. Refer to “Defining an SNMP user account” .
If SNMP version 3 is not configured, then community strings by default are used to authenticate
access.
Even if SNMP version 3 users are configured on the device, the system will still accept SNMP
version 1, 2c and 3 PDUs from the remote manager.
Defining the engine ID
A default engine ID is generated during system start up.The format of the default engine ID is
derived from RFC 2571 (Architecture for SNMP frameworks) within the MIB description for object
SnmpEngineID.
To determine what the default engine ID of the device is, enter the show snmp engineid command
and find the following line.
Local SNMP Engine ID: 800007c70300e05290ab60
Refer to the section “Displaying the engine ID” for details.
The default engine ID guarantees the uniqueness of the engine ID for SNMP version 3. If you want
to change the default engine ID, enter a command such as the following.
Brocade(config)# snmp-server engineid local 800007c70300e05290ab60
Syntax: [no] snmp-server engineid local hex-string
The local parameter indicates that engine ID to be entered is the ID of this device, representing an
SNMP management entity.