Installation manual

3-44
SIGNAMAX LLC • www.signamax.eu
Configuring SNMPv3 Management Access
To configure SNMPv3 management access to the switch, follow these steps:
1. If you want to change the default engine ID, it must be changed first before configuring
other parameters.
2. Specify read and write access views for the switch MIB tree.
3. Configure SNMP user groups with the required security model (i.e., SNMP v1, v2c or
v3) and security level (i.e., authentication and privacy).
4. Assign SNMP users to groups, along with their specific authentication and privacy
passwords.
Setting the Local Engine ID
An SNMPv3 engine is an independent SNMP agent that resides on the switch. This
engine protects against message replay, delay, and redirection. The engine ID is also
used in combination with user passwords to generate the security keys for authenticating
and encrypting SNMPv3 packets.
A local engine ID is automatically generated that is unique to the switch. This is referred
to as the default engine ID. If the local engine ID is deleted or changed, all SNMP users
will be cleared. You will need to reconfigure all existing users.
A new engine ID can be specified by entering 10 to 64 hexadecimal characters (5 to 32
octets in hexadecimal format). If an odd number of characters are specified, a trailing zero
is added to the value to fill in the last octet. For example, the value “123456789” is
equivalent to “1234567890”.
Web – Click SNMP, SNMPv3, Engine ID. Enter an ID of up to 64 hexadecimal characters
and then click Save.
Figure 3-26 Setting an Engine ID
CLI – This example sets an SNMPv3 engine ID.
Console(config)#snmp-server engine-id local 12345abcdef 4-90
Console(config)#exit
Console#show snmp engine-id 4-91
Local SNMP engineID: 12345abcdef000000000000000
Local SNMP engineBoots: 1
Console#