Dell PowerSwitch S5212F-ON EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 158

The security model corresponds to the SNMP version that users use to send and receive SNMP messages. The security level configures SNMPv3 user authentication and privacy settings: • auth - Authenticate users in SNMP messages. • noauth - Do not authenticate users or encrypt SNMP messages; send messages in plain text. • priv - Authenticate users and encrypt/decrypt SNMP messages. Enter an ACL to limit user access so that only messages from and to ACL-allowed users are received and sent from the SNMP agent on the switch. snmp-server group group-name {v1 | v2c | v3 security-level} [access acl-name] [read view-name] [write view-name] [notify view-name] To configure a view of the MIB tree on the SNMP agent, use the snmp-server view command. To configure an SNMPv3 user's authentication and privacy settings, use the snmp-server user command. To display the configured SNMP groups, use the show snmp group command. Configure SNMPv1 or v2c group OS10(config)# snmp-server group v2group 2c read readview notify GetsSets Configure SNMPv3 group OS10(config)# snmp-server group v3group 3 priv read readview write writeview notify alltraps Display SNMP groups OS10# show snmp group groupname version notifyview readview groupname version security level notifyview readview writeview : v2group : 2c : GetsSets : readview : v3group : 3 : priv : alltraps : readview : writeview Configure SNMP users Configure user access to the SNMP agent on the switch using group membership. Assign each user to a group and configure SNMPv3specific authentication and encryption settings, and optionally, localized security keys and ACL-based access. Re-enter the command multiple times to configure SNMP security settings for all users. snmp-server user user-name group-name security-model [[noauth | auth {md5 | sha} authpassword] [priv {des | aes}]] [localized] [access acl-name] [remote ip-address udp-port port-number]] The group to which a user is assigned determines the user's access privilege. To configure a group's access privilege - read, write, and notify - to the switch, use the snmp-server group command. The security model for SNMPv3 provides the strongest security with user authentication and packet encryption. No default values exist for SNMPv3 authentication and privacy algorithms and passwords. If you forget a password, you cannot recover it - you must reconfigure the user. You can specify either a plain-text password or an encrypted cypher-text password. In either case, the password stores in the configuration in encrypted form and displays as encrypted in the show running-config snmp output. A localized authentication or privacy key is more complex and provides greater privacy protection. Localized keys are generated using the engine ID of the switch. For this reason, you cannot use the localized SNMP security passwords in the configuration file on another switch. For more information, see Configure SNMP engine ID. To display the localized authentication and privacy keys in an SNMPv3 user configuration, use the show running-configuration snmp command. To limit user access to the SNMP agent on the switch, enter an access acl-name value. In IPv6 ACLs, SNMP supports only IPv6 and UDP types. TCP, ICMP, and port rules are not supported. To display the configured SNMP users, use the show snmp user command. 158 System management