5.5 HP StorageWorks X9300 Network Storage Gateway Administrator Guide (AW539-96007, March 2011)

NOTE:
Users of software versions earlier than 4.3 should be aware that the single ibrix_snmp command
has been replaced by two commands, ibrix_snmpagent and ibrix_snmptrap. If you have
scripts that include ibrix_snmp, be sure to edit them to include the correct commands.
Whereas SNMPV2 security was enforced by use of community password strings, V3 introduces the
USM and VACM. Discussion of these models is beyond the scope of this document. Refer to RFCs
3414 and 3415 at http://www.ietf.org for more information. Note the following:
• In the SNMPV3 environment, every message contains a user name. The function of the USM is to
authenticate users and ensure message privacy through message encryption and decryption. Both
authentication and privacy, and their passwords, are optional and will use default settings where
security is less of a concern.
• With users validated, the VACM determines which managed objects these users are allowed to
access. The VACM includes an access scheme to control user access to managed objects; context
matching to define which objects can be accessed; and MIB views, defined by subsets of IOD
subtree and associated bitmask entries, which define what a particular user can access in the
MIB.
Steps for setting up SNMP include:
• Agent configuration (all SNMP versions)
• Trapsink configuration (all SNMP versions)
• Associating event notifications with trapsinks (all SNMP versions)
• View definition (V3 only)
• Group and user configuration (V3 only)
X9000 Software implements an SNMP agent on the management console that supports the private
X9000 Software MIB. The agent can be polled and can send SNMP traps to configured trapsinks.
Setting up SNMP notifications is similar to setting up email notifications. You must associate events
to trapsinks and configure SNMP settings for each trapsink to enable the agent to send a trap when
an event occurs.
Configuring the SNMP agent
The SNMP agent is created automatically when the management console is installed. It is initially
configured as an SNMPv2 agent and is off by default.
Some SNMP parameters and the SNMP default port are the same, regardless of SNMP version. The
agent port is 161 by default. SYSCONTACT, SYSNAME, and SYSLOCATION are optional MIB-II agent
parameters that have no default values.
The -c and -s options are also common to all SNMP versions. The -c option turns the encryption
of community names and passwords on or off. There is no encryption by default. Using the -s option
toggles the agent on and off; it turns the agent on by starting a listener on the SNMP port, and turns
it off by shutting off the listener. The default is off.
The format for a v1 or v2 update command follows:
ibrix_snmpagent -u –v {1|2} [-p PORT] [-r READCOMMUNITY] [-w WRITECOMMUNITY]
[-t SYSCONTACT] [-n SYSNAME] [-o SYSLOCATION] [-c {yes|no}] [-s {on|off}]
X9300 Network Storage Gateway Administrator Guide 39