Specifications

298 Implementing IBM System Networking 10Gb Ethernet Switches
The SNMP manager should be able to reach the management interface or any of the IP
interfaces on the switch.
For the SNMP manager to receive the SNMPv1 traps sent out by the SNMP agent on the
switch, configure the trap host on the switch by running the following command:
RS8264(config)# snmp-server trap-src-if <trap source IP interface>
RS8264(config)# snmp-server host <IPv4 address> <trap host community string>
SNMP version 3
SNMP version 3 (SNMPv3) is an enhanced version of the Simple Network Management
Protocol, approved by the Internet Engineering Steering Group in March 2002. SNMPv3
contains additional security and authentication features that provide data origin
authentication, data integrity checks, timeliness indicators, and encryption to protect against
threats, such as masquerade, modification of information, message stream modification,
and disclosure.
Using SNMPv3, your clients can query the MIBs securely.
Default configuration
IBM Networking OS has two SNMPv3 users by default. Both of the following users have
access to all the MIBs supported by the switch:
򐂰 User 1 name is adminmd5 (password adminmd5). The authentication used is MD5.
򐂰 User 2 name is adminsha (password adminsha). The authentication used is SHA.
Up to 16 SNMP users can be configured on the switch. To modify an SNMP user, run the
following command:
RS8264(config)# snmp-server user <1-16> name <1-32 characters>
Users can be configured to use the authentication and privacy options. The G8264 switch
supports two authentication algorithms, MD5 and SHA, as specified in the
following command:
RS8264(config)# snmp-server user <1-16> authentication-protocol
{md5|sha} authentication-password
User configuration example
To configure a user, complete the following steps:
1. To configure a user with the name admin, the authentication type MD5, the authentication
password of admin, and the privacy option DES with a privacy password of admin, run the
commands shown in Example 7-9.
Example 7-9 SNMP v3 user configuration example
RS8264(config)# snmp-server user 5 name admin
RS8264(config)# snmp-server user 5 authentication-protocol md5
authentication-password
Changing authentication password; validation required:
Enter current admin password: <admin. password>
Enter new authentication password: <auth. password>
Re-enter new authentication password: <auth. password>
New authentication password accepted.
RS8264(config)# snmp-server user 5 privacy-protocol des
privacy-password
Changing privacy password; validation required: