Lantronix G520 G520 User Guide - Page 125

10: Services SNMP Model v1 v2c v3 v3 v3 Table 10-28 SNMP Security Models and Levels Level noAuthNoPriv Authentication Community String noAuthNoPriv Community String noAuthNoPriv Username authNoPriv MD5 or SHA authPriv MD5 or SHA Encryption No No No No DES or AES SNMP Configuration The SNMP agent must be configured to use the version of SNMP that is supported by the management station. An agent can communicate with multiple managers. You can configure the SNMP agent to support communication with one management station using SNMPv1, one using SNMPv2c, and one using SNMPv3. The web interface allows you to configure the SNMP settings. The configuration specifies directives in the following areas:  agent behavior  access control to the agent (VACM)  system information and monitoring  active monitoring of the local system Agent Behavior The following directives control the behavior of SNMP network service.  agent address - the listening address on which to receive incoming SNMP requests. The default behavior is to listen on UDP port 161 on all IPv4 interfaces  EngineID - SNMPv3 only. SNMPv3 requires an SNMP agent to define a unique engine ID to respond to SNMP requests. For configuration details, see Table 10-29 on page 128. View-based Access Control Model (VACM) SNMP v1/v2c/v3-USM follow the VACM model. VACM determines whether to allow access to a managed object in a local MIB by a remote principal. VACM makes use of a MIB that defines the access control policy for the agent and makes it possible to use remote configuration. The SNMP service uses four keywords to set up VACM:  Com2sec - maps a v1 and v2c community string and a source IP or network to a security name.  Group - maps a security name/security model pair to a group name.  View - maps an OID subtree family and bitstring value (mask-optional), or MIB view, to a view name.  Access - maps a group name to a minimum access level (noauth, auth, or priv) and read/ write/notify scope for a specified security model (v1, v2c, v3/usm, or any). In summary:  The Access and View keywords determine what access is being controlled. G520 Series IoT Cellular Gateway User Guide 125