beautypg.com

Allied Telesis AT-S62 User Manual

Page 230

background image

Chapter 17: SNMPv3 Configuration

Section III: SNMPv3 Operations

230

SNMPv3 User Table

The Configure SNMPv3 User Table menu allows you to create an
SNMPv3 user and provides the options of configuring authentication
and privacy protocols. With an authentication protocol configured, users
are authenticated when they send and receive messages. In addition,
you can configure a privacy protocol and password so messages a user
sends and receives are encrypted. The DES privacy algorithm uses the
privacy password and the Engine ID to generate a key that is used for
encryption. Lastly, you can configure a storage type for this table entry
which allows you to save this user and its related configuration to flash
memory.

SNMPv3 View Table

The Configure SNMPv3 View Table Menu allows you to create a view of
the MIB OID Table. First, you configure a view of a subtree. Then you
have the option of configuring a Subtree Mask that further refines the
subtree view. For example, you can use a Subtree Mask to restrict a user’s
view to one row of the MIB OID Table. In addition, you can chose to
include or exclude a view. As a result, you can let a user see a particular
view or prevent a user from seeing a particular view. Lastly, you can
configure a storage type for this table entry which allows you to save this
view to flash memory.

SNMPv3 Access Table

The Configure SNMPv3 Access Table Menu allows you to configure a
security group. After you create a security group, you assign a set of
users with the same access privileges to this group using the SNMPv3
SecurityToGroup Table. It is useful to consider the types of groups you
want to create and the types of access privileges each group will have. In
this way, it is easy to keep track of your users as belonging to one or two
groups.

For each group, you can assign read, write, and notify views of the MIB
table. The views you assign here have been previously defined in the
Configure SNMPv3 View Table Menu. For example, the Read View allows
group members to view the specified portion of the OID MIB table. The
Write View allows group members to write to, or modify, the MIBs in the
specified MIB view. The Notify View allows group members to send trap
messages defined by the MIB view. Lastly, you can configure a storage
type for this table entry which allows you to save this view to flash
memory.