Cisco WS-C4003 Software Guide - Page 309

Chapter 23 Configuring SNMP Understanding SNMPv3 read-write-all Root Trap-Rec-Address 172.16.10.10 172.16.10.20 Console> (enable) Trap-Rec-Community read-write read-write-all Note To disable access for an SNMP community, set the community string for that community to the null string (do not enter a value for the community string). Understanding SNMPv3 SNMPv3 cpntains all the functionality of SNMPv1 and SNMPv2, but SNMPv3 has significant enhancements to adminstration and security. SNMPv3 is an interoperable standards-based protocol. SNMPv3 provides secure access to devices by authenticating and encrypting packets over the network. The security features provided in SNMPv3 are as follows: • Message integrity-Ensuring that a packet has not been tampered with in transit • Authentication-Determining the message is from a valid source • Encryption-Scrambling contents of packet to prevent it from being seen by an unauthorized source Benefits SNMPv3 provides the following benefits for managing your network: • SNMP devices can collect data securely without being tampered with or corrupted. • You can encrypt confidential information (such as SNMP set commands that change a router's configuration) to prevent the contents from being exposed on the network. SNMP Entity In SNMPv3, the terms SNMP Agents and SNMP Managers are no longer used. These concepts have been combined into what is called an SNMP entity. An SNMP entity is made up of an SNMP engine and SNMP applications. An SNMP engine is made up of four components, as shown in Figure 23-1: • Dispatcher • Message Processing Subsystem • Security Subsystem • Access Control Subsystem 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 23-7