User guide

83User Guide InfraStruxure 150kVA Power Distribution Unit
SNMPv3.
Path: Administration > Network > SNMPv3 > options
For SNMP GETs, SETs, and trap receivers, SNMPv3 uses a system of user profiles to identify users. An
SNMPv3 user must have a user profile assigned in the MIB software program to perform GETs and
SETs, browse the MIB, and receive traps.
Note: To use SNMPv3, you must have a MIB program that supports SNMPv3.
The PDU supports only MD5 authentication and DES encryption.
Option Description
access SNMPv3 Access: Enables SNMPv3 as a method of communication with this device.
user
profiles
By default, lists the settings of four user profiles, configured with the user names apc snmp
profile1 through apc snmp profile4, and no authentication and no privacy (no encryption). To edit
the following settings for a user profile, click a user name in the list.
User Name: The identifier of the user profile. SNMP version 3 maps GETs, SETs, and traps to a
user profile by matching the user name of the profile to the user name in the data packet being
transmitted. A user name can have up to 32 ASCII characters.
Authentication Passphrase: A phrase of 15 to 32 ASCII characters (apc auth passphrase,
by default) that verifies that the NMS communicating with this device through SNMPv3 is the
NMS it claims to be, that the message has not been changed during transmission, and that the
message was communicated in a timely manner, indicating that it was not delayed and that it was
not copied and sent again later at an inappropriate time.
Privacy Passphrase: A phrase of 15 to 32 ASCII characters (apc crypt passphrase, by
default) that ensures the privacy of the data (by means of encryption) that an NMS is sending to this
device or receiving from this device through SNMPv3.
Authentication Protocol
: The APC implementation of SNMPv3 supports MD5 authentication.
Authentication will not occur unless MD5 is selected as the authentication protocol.
Privacy Protocol: The APC implementation of SNMPv3 supports DES as the protocol for
encrypting and decrypting data. Privacy of transmitted data requires that DES is selected as the
privacy protocol.
Note:
You cannot select the privacy protocol if no authentication protocol is selected.
access
control
You can configure up to four access control entries to specify which NMSs have access to this
device. The opening page for access control, by default, assigns one entry to each of the four user
profiles, but you can edit these settings to apply more than one entry to any user profile to grant
access by several specific IP addresses, host names, or IP address masks.
• If you leave the default access control entry unchanged for a user profile, all NMSs that use that
profile have access to this device.
• If you configure multiple access entries for one user profile, the limit of four entries requires that
one or more of the other user profiles must have no access control entry. If no access control entry
is listed for a user profile, no NMS that uses that profile has any access to this device.
To edit the access control settings for a user profile, click its user name.
Access: Enable to activate the access control specified by the parameters in this entry.
User Name: Select from the list the user profile to which this access control entry will apply. The
choices are the four user names that you configure through the user profiles option.
NMS IP/Host Name: The IP address, IP address mask, or host name that controls access by the
NMS. A host name or a specific IP address (such as 149.225.12.1) allows access only by the NMS
at that location. An IP address mask that contain 255 restricts access as follows:
• 149.225.12.255: Access only by an NMS on the 149.225.12 segment.
• 149.225.255.255: Access only by an NMS on the 149.225 segment.
•149.255.255.255: Access only by an NMS on the 149 segment.
• 0.0.0.0 (default setting) also expressed as 255.255.255.255: Access by any NMS on any segment.