Zhone 2000 ユーザーガイド

ページ / 296
32
2 0 0 0 - A 2 - G B 2 3 - 0 0
SNMP 3.0 requires the configuration of six data structures on the SNMP 3.0 
menu (Figure 3.3), which is accessible from the SNMP Configuration menu. 
Menu options are available to configure a default set of structures, which will 
allow SNMP 1.0 or SNMP 3.0. Choose Option 3 on the SNMP 3.0 
Configuration menu to set a simple default configuration.
Figure 3.3
SNMP V3 Configuration Menu
Two SNMP “community entries” are generated: public (read-only 
community), and a read-write community. Since a read-only community of 
public is the default for all SNMP implementations, you are encouraged to 
reconfigure the first community entry to a more secure value.
The “target entries” specify who may access the IAD via SNMP. The first 
entry, named “everyone,” allows access from the entire Internet. Entries are 
added if an IP trap host is configured, or if EOC access is configured. For 
example, if you want only IP addresses 1.2.3.0 through 1.2.3.255 to have 
SNMP access to the IAD, you will reconfigure the target entry with the 
address of 1.2.3.0, and the mask 255.255.255.0. Note EOC access is specified 
by the reserved IP address 255.255.255.255.
The “group entries” specify which version of SNMP to allow: 1.0 or 3.0 (user 
security model).
The “access entry” specifies which version of SNMP to allow, the security 
level (MD5 authorization encryption), and which views are accessible.
The “view entry” specifies which portion of the MIB is accessible or not 
accessible. For example, it is possible to create a view to allow access to the 
ATM Forum LES MIB from the EOC, and allow the entire MIB to be 
accessible from an IP location.