D-Link DIS-200G User Manual - Page 27

Traps, Management Information Base (MIB), Authentication Failure and Topology Change.

Page 27 highlights

DIS-200G Series Layer 2 Gigabit Industrial Smart Managed Switch Hardware Installation Guide • private - Allows authorized management stations to retrieve and modify MIB objects. SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes what each user on that list can do as an SNMP manager. The switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may also be set for a listed group of SNMP managers. Thus, a group of SNMP managers can be created to view read-only information or receive traps using SNMPv1 while assigning a higher level of security to another group, granting read/write privileges using SNMPv3. Using SNMPv3 individual users or groups of SNMP managers can be allowed to perform or be restricted from performing specific SNMP management functions. The functions that have been allowed or restricted are defined using the Object Identifier (OID) associated with a specific MIB. An additional layer of security is available for SNMPv3 in that SNMP messages may be encrypted. Traps Traps are messages that are sent by an SNMP-enabled device to the NMS, and can be used to alert network personnel of events that occur on the switch. The events can be as serious as a reboot (someone accidentally turned off the switch), or less serious like a port status change. The switch generates traps and sends them to a preconfigured IP address, usually a Network Management Station (NMS). Typical traps include trap messages for Authentication Failure and Topology Change. Management Information Base (MIB) A Management Information Base (MIB) stores management and counter information. The switch uses the standard MIB-II Management Information Base module. Consequently, values for MIB objects can be retrieved from any SNMP-based network management software. In addition to the standard MIB-II, the switch also supports its own proprietary enterprise MIB as an extended Management Information Base. The proprietary MIB may also be retrieved by specifying the MIB Object Identifier. MIB values can be either read-only or read-write. 27

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47

DIS-200G Series Layer 2 Gigabit Industrial Smart Managed Switch Hardware Installation Guide
27
private
- Allows authorized management stations to retrieve and modify MIB objects.
SNMPv3 uses a more sophisticated authentication process that is separated into two parts. The first part is to
maintain a list of users and their attributes that are allowed to act as SNMP managers. The second part describes
what each user on that list can do as an SNMP manager.
The switch allows groups of users to be listed and configured with a shared set of privileges. The SNMP version may
also be set for a listed group of SNMP managers. Thus, a group of SNMP managers can be created to view read-only
information or receive traps using SNMPv1 while assigning a higher level of security to another group, granting
read/write privileges using SNMPv3.
Using SNMPv3 individual users or groups of SNMP managers can be allowed to perform or be restricted from
performing specific SNMP management functions. The functions that have been allowed or restricted are defined
using the Object Identifier (OID) associated with a specific MIB. An additional layer of security is available for SNMPv3
in that SNMP messages may be encrypted.
Traps
Traps are messages that are sent by an SNMP-enabled device to the NMS, and can be used to alert network
personnel of events that occur on the switch. The events can be as serious as a reboot (someone accidentally turned
off the switch), or less serious like a port status change. The switch generates traps and sends them to a pre-
configured IP address, usually a Network Management Station (NMS). Typical traps include trap messages for
Authentication Failure and Topology Change.
Management Information Base (MIB)
A Management Information Base (MIB) stores management and counter information. The switch uses the standard
MIB-II Management Information Base module. Consequently, values for MIB objects can be retrieved from any
SNMP-based network management software. In addition to the standard MIB-II, the switch also supports its own
proprietary enterprise MIB as an extended Management Information Base. The proprietary MIB may also be retrieved
by specifying the MIB Object Identifier. MIB values can be either read-only or read-write.