Zhone 7995 ユーザーガイド
5. Security
5-6
September 2004
7990-A2-GB20-20
Controlling SNMP Access
There are three methods for limiting SNMP access:
Disable the SNMP management option. Refer to
Assign SNMP community names and access types.
Limit SNMP access through validation of the IP address of each allowed
SNMP manager.
SNMP manager.
Assigning SNMP Community Names and Access Types
The unit can be managed by an SNMP manager supporting SNMP. The
community name must be supplied by an external SNMP manager accessing an
object in the MIB.
community name must be supplied by an external SNMP manager accessing an
object in the MIB.
To define SNMP community names, follow this menu selection sequence:
Main Menu
→Configuration→Current Configuration→
Management and Communication
→General SNMP Management
Refer to
Enable SNMP Management.
Assign the SNMP community names of the SNMP Managers that are allowed
to access the unit’s Management Information Base (MIB).
to access the unit’s Management Information Base (MIB).
Specify Read or Read/Write access for each SNMP community name.
Limiting SNMP Access through the IP Addresses of the Managers
The unit provides an additional level of security through validation of the IP
addresses.
addresses.
The SNMP Management option must be enabled. To control SNMP access with IP
addresses, follow this menu selection sequence:
addresses, follow this menu selection sequence:
Main Menu
→Configuration→Current Configuration→
Management and Communication
→SNMP NMS Security
Refer to
Options. The SNMP access can be limited by:
Enabling NMS IP address checking.
Add each IP address and access level (limit of 10).
NOTES:
— Do not change or delete the IP address or access level of the NMS
performing the sets, or enable IP address checking prior to adding the
NMS to the table.
NMS to the table.
— The SNMP NMS Security Options screen is not available if the unit is
connected to a DSLAM card running in IP Conservative mode.