User Manual User guide

508 Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
Chapter 19 Configuring SNMP
SNMP Versions
This software release supports these SNMP versions:
• SNMPv1—The Simple Network Management Protocol, a full Internet
standard, defined in RFC 1157.
• SNMPv2C, has these features:
– SNMPv2—Version 2 of the Simple Network Management Protocol, a
draft Internet standard, defined in RFCs 1902…1907.
– SNMPv2C—The Community-based Administrative Framework for
SNMPv2, an experimental Internet protocol defined in RFC 1901.
• SNMPv3, has these features:
– Support for SHA and MD5 authentication protocols and DES56
encryption.
– Three security levels: no authentication and no privacy
(NoAuthNoPriv), authentication and no privacy (AuthNoPriv), and
authentication and privacy (AuthPriv).
SNMPv3 supports the highest available levels of security for SNMP
communication. Community strings for SNMPv1 and SNMPv2 are stored and
transferred as plain text without encryption. In the SNMPv3 security model,
SNMP users authenticate and join a user group. Access to system data is restricted
based on the group.
You must configure the SNMP agent to use the version of SNMP supported by
the management station. An agent can communicate with multiple managers;
therefore, you can configure the software to support communication with one
management station by using the SNMPv3 protocol and another by using the
SNMPv2 or SNMPv1 protocol.
This table lists the SNMP versions and security levels supported on access points:
For detailed information on SNMPv3, see the publication New Feature
Documentation for Cisco IOS Release 12.0(3)T.
Table 109 - SNMP Versions and Security Levels
SNMP Version Security Level Authentication Encryption
v1 NoAuthNoPriv Community string match None
v2C NoAuthNoPriv Community string match None
v3 NoAuthNoPriv Username match None
v3 AuthNoPriv HMAC-MD5 or HMAC-SHA
algorithms
None
v3 AuthPriv HMAC-MD5 or HMAC-SHA
algorithms
DES 56-bit encryption