User guide
Chapter 5
Setup and Configuration
RUGGEDCOM ROS
User Guide
100 Managing SNMP
Section 5.2
Managing SNMP
ROS supports versions 1, 2 and 3 of the Simple Network Management Protocol (SNMP), otherwise referred to
as SNMPv1, SNMPv2c and SNMPv3 respectively. SNMPv3 provides secure access to the devices through a
combination of authentication and packet encryption over the network. Security features for this protocol include:
Feature Description
Message Integrity Makes sure that a packet has not been tampered with in-transit.
Authentication Determines if the message is from a valid source.
Encryption Encrypts the contents of a packet to prevent it from being seen by an unauthorized source.
SNMPv3 provides security models and security levels. A security model is an authentication strategy setup for
a user and the group in which the user resides. A security level is a permitted level of security within a security
model. A combination of a security model and level will determine which security mechanism is employed when
handling an SNMP packet.
Before configuring SNMPv3, note the following:
• Each user belongs to a group
• A group defines the access policy for a set of users
• An access policy defines what SNMP objects can be accessed for (i.e. reading, writing and creating
notifications)
• A group determines the list of notifications its users can receive
• A group also defines the security model and security level for its users
For SNMPv1 and SNMPv2c, a community string can be configured. The string is mapped to the group and
access level with a security name, which is configured as User Name.
The following sections describe how to setup and manage SNMP on the device:
• Section 5.2.1, “Managing SNMP Users”
• Section 5.2.2, “Managing Security-to-Group Mapping”
• Section 5.2.3, “Managing SNMP Groups”
Section 5.2.1
Managing SNMP Users
The following sections describe how to configure and manage SNMP users, refer to the following:
• Section 5.2.1.1, “Viewing a List of SNMP Users”
• Section 5.2.1.2, “Adding an SNMP User”
• Section 5.2.1.3, “Deleting an SNMP User”