EX3500 SNMP Users

About this task

An EX3500 SNMP management session utilizes unique SNMP users with specific authentication and privacy parameters.

To administrate EX3500 SNMP users and their permissions:

Procedure

  1. Go to ConfigurationManagementEX3500 Management Policy.
    The screen lists those EX3500 management policies created thus far. Select Add to create a new EX3500 management policy, Edit to modify an existing policy or Delete to remove an obsolete policy. Existing lists can be copied or renamed as needed.
  2. Select the SNMP User tab.
    Click to expand in new window
    GUID-27966319-CC9C-4F15-A31B-BA8C1A34969D-low.png
  3. Review the following EX3500 SNMP user credentials to determine whether a new user requires creation on an existing user configuration needs modification:
    User Name Displays the 32 character maximum SNMP user name assigned the specific SNMP version and remote SNMP server resource listed. More than one user can be assigned to the same EX3500 SNMP user group.
    Version Lists whether SNMPv1, SNMPv2 or SNMPv3 is applied to this EX3500 SNMP user. SNMP v2 is identical to version 1, but it adds support for 64 bit counters. Most devices support SNMP v2c automatically. However, there are some devices that require you to explicitly enable v2, and that poses no risk. SNMP v3 adds security to the 64 bit counters provided with SNMP v2. SNMP v3 adds both encryption and authentication, which can be used together or separately. Its setup is more complex than just defining a community string. But if you require security, SNMP v3 is recommended.
    Remote IP Address Lists the remote server resource designated for receiving SNMP trap and inform event messages for the listed SNMP user.
    Group Name Lists the 32 character maximum name assigned to this SNMP group, as SNMP access rights are organized by groups. The trap group name can be any string and is embedded in the community name field of a trap. A maximum of 17 groups can be set for EX3500 model switches.
  4. Select Add to create a new user configuration or Edit to modify the attributes of an existing EX3500 SNMP user configuration.
    Click to expand in new window
    GUID-53E89B26-25CC-4520-BACB-B273C168294B-low.png
  5. Set the following SNMP user credentials for the EX3500 SNMP user:
    User Name Enter a 32 character maximum SNMP user name for EX3500 SNMP session management.
    Version Use the drop-down menu to define whether SNMPv1, SNMPv2 or SNMPv3 is applied to this EX3500 SNMP user configuration. SNMP v2 is identical to version 1, but it adds support for 64 bit counters. Most devices support SNMP v2c automatically. However, there are some devices that require you to explicitly enable v2, and that poses no risk. SNMP v3 adds security to the 64 bit counters provided with SNMP v2. SNMP v3 adds both encryption and authentication, which can be used together or separately. Its setup is more complex than just defining a community string. But if you require security, SNMP v3 is recommended.
    Remote IP Address Set the remote server resource IP address designated for receiving SNMP trap and inform event messages for this SNMP user.
    Group Name Enter a 32 character maximum for a SNMP group. The group name can be any string and is embedded in the community name field of a SNMP trap.
    Encryption When using SNMPv3, the Encryption option becomes available to scramble packet contents and prevent them from exposure to unauthorized sources.
    Authentication When using SNMPv3, the Authentication option becomes available to ensure messaging is from a valid source. SNMPv3 uses the user-based security model (USM) for message security and the view-based access control model (VACM) for access control. USM specifies authentication and encryption. VACM specifies access-control rules.
    Authentication Password Enter a 8 - 40 character ASCII authentication password. The selected authentication password ensures only trusted and authorized users can access an EX3500 SNMP management session.
    Private Type Use the drop-down menu to specify the privacy type. The Advanced Encryption Standard (AES) is utilized as one of the privacy protocol options for SNMPv3 messages in either an aes128, aes192 or aes256 format and are recommended. 3DES and des56 are also options, but are considered somewhat insecure and vulnerable to brute-force-attacks.
    Private Password Enter a 8 - 64 character ASCII password to secure the privacy type selected.
  6. Select OK when completed to update the EX3500 SNMP user settings. Select Reset to revert the screen back to its last saved configuration.
9036512-00 Rev AA