Comtech EF Data CIM-300L - Manual (Page 262)

CiM-300L IP Enabled Satellite Modem Rev. 1
SNMP CD/CIM300L.IOM
236
In SNMP v1/v2c, the community string is sent unencrypted in the SNMP packets.
Caution must be taken by the network administrator to ensure that SNMP packets travel
only over a secure and private network if security is a concern. A packet sniffer can
easily obtain the community string by viewing the SNMP traffic on the network.
The community string is entered into the MIB Browser or Network Node Management
software and is used to authenticate users and determine access privileges to the SNMP
agent. The community string should match the concatenated user name and password.
For example, if the user name is “comtech” and the password is “donttell” then the
community string should be “comtechdonttell”.
Community strings are used to set up a three-tiered security scheme in the CiM-300L.
The CiM-300L provides for three types of users in the system: an Admin User, a
Read/Write User, and a Read Only User. These users mirror those found in the CLI
Name/Password Configuration screen. The Admin User has read and write access to all
parameters in all standard and private MIBs. The Read/Write User has read and write
access to all parameters in the standard and private MIBs, except for the cimUnitAdmin
Group in the cimController MIB. The Read Only User has access to only read
parameters from the standard MIBs and the private CiM-300L MIB. The Read Only
User cannot do any reads (GETS) in the private CiM-300L IP Controller MIB.
Table 11-22. CiM SNMP Community Names
User Name MIB-II IP Controller MIB CiM-300 MIB
Admin User Read/Write Read/Write Read/Write
Read/Write User Read/Write Read/Write (not Administration) Read/Write
Read Only User Read No access Read