Dell MX9116n EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 156

Table 41. Dell EMC Enterprise MIBs (continued) Module Description DELLEMC-OS10-PRODUCTS-MIB OS10 platform product definitions DELLEMC-OS10-SMI-MIB OS10 SMI implementations DELLEMC-OS10-TC-MIB OS10 networking equipment textual convention NOTE: To monitor BGP, OS10 supports the Dell EMC proprietary MIB, DELLEMC-OS10-BGP4V2-MIB.mib. OS10 returns a No such object message when you use the standard BGP4-MIB with OID 1.3.6.1.2.1.15. Use OID 1.3.6.1.4.1.674.11000.5000.200.1.1 for BGP-related MIB objects. SNMPv3 SNMP version 3 (SNMPv3) provides an enhanced security model for user authentication and SNMP message encryption. User authentication requires that SNMP packets come from an authorized source. Message encryption ensures that packet contents cannot be viewed by an unauthorized source. To configure SNMPv3-specific security settings - user authentication and message encryption - use the snmp-server user command. You can generate localized keys with enhanced security for authentication and privacy (encryption) passwords. SNMP engine ID An engine ID identifies the SNMP entity that serves as the local agent on the switch. The engine ID is an octet colon-separated number; for example, 00:00:17:8B:02:00:00:01. When you configure an SNMPv3 user, you can specify that a localized authentication and/or privacy key be generated. The localized password keys are generated using the engine ID of the switch. A localized key is more complex and provides greater privacy protection. The engine ID used to generate the password keys is unique to the switch. For this reason, you cannot copy and use localized SNMP security passwords on another switch. SNMP groups and users A member of an SNMP group that accesses the local SNMP agent is known as an SNMP user. An SNMP user on a remote device is identified by an IP address and UDP port from which the user accesses the local agent. In OS10, users are assigned SNMP access privielges according to the group they belong to. You configure each group for access to SNMP MIB tree views. SNMP views In OS10, you configure views for each security model and level in an SNMP user group. Each type of view specifies the object ID (OID) in the MIB tree hierarchy at which the view starts. You can also specify whether the rest of the MIB tree structure is included or excluded from the view. • A read view provides read-only access to the specified OID tree. • A write view provides read-write access to the specified OID tree. • A notify view allows SNMP notifications (traps and informs) from the specified OID tree to be sent to other members of the group. Configure SNMP To set up communication with SNMP agents in your network: • Configure the read-only, read-write, and notify access for SNMP groups. • Configure groups with SNMP views for specified SNMP versions (security models). • Assign users to groups and configure SNMPv3-specific authentication and encryption settings, and optionally, localized security keys and ACL-based access. Configuring SNMP consists of these tasks in any order: • Configure SNMP engine ID • Configure SNMP views 156 System management