Technical data

FastIron Ethernet Switch Administration Guide 161

53-1002637-02

Chapter

SNMP Access

Table 6 lists individual Brocade switches and the SNMP access methods they support. These

features are supported in the Layer 2 and Layer 3 software images, except where explicitly noted.

This chapter contains the following sections:

•SNMP overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

•SNMP community strings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162

•User-based security model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165

•Defining SNMP views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

•SNMP version 3 traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

•Displaying SNMP Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174

•SNMP v3 configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

SNMP overview

SNMP is a set of protocols for managing complex networks. SNMP sends messages, called protocol

data units (PDUs), to different parts of a network. SNMP-compliant devices, called agents, store

data about themselves in Management Information Bases (MIBs) and return this data to the SNMP

requesters.

“Security Access” chapter in the FastIron Ethernet Switch Security Configuration Guide introduced

a few methods used to secure SNMP access. They included the following:

• Using ACLs to restrict SNMP access

• Restricting SNMP access to a specific IP address

• Restricting SNMP access to a specific VLAN

• Disabling SNMP access

TABLE 6 Supported SNMP access features

Feature FSX 800

FSX 1600

FCX ICX 6610 ICX 6430 ICX 6450

SNMP v1, v2, v3 Yes Yes Yes Yes Yes

Community strings Yes Yes Yes Yes Yes

User-based security model for SNMP v3 Yes Yes Yes Yes Yes

SNMP v3 traps Yes Yes Yes Yes Yes

Defining the UDP port for SNMP v3 traps Yes Yes Yes Yes Yes

SNMP v3 over IPv6 Yes Yes Yes Yes Yes

AES encryption for SNMP v3 Yes Yes Yes Yes Yes