Chapter 40 Configuring Snmp; Snmp Version 1 And Version 2C; Snmp Version 3; Assigning Snmp Switch Contact And Location Information - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

SNMPv3 CLI User Management and AAA Integration

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
This section includes the following topics:
•
•
•

SNMP Version 1 and Version 2c

SNMP Version 1 (SNMPv1) and SNMP Version 2c (SNMPv2c) use a community string match for user
authentication. Community strings provided a weak form of access control in earlier versions of SNMP.
SNMPv3 provides much improved access control using strong authentication and should be preferred
over SNMPv1 and SNMPv2c wherever it is supported.

SNMP Version 3

SNMP Version 3 (SNMPv3) is an interoperable standards-based protocol for network management.
SNMPv3 provides secure access to devices by a combination of authenticating and encrypting frames
over the network. The security features provided in SNMPv3 are:
•
•
•
SNMPv3 provides for both security models and security levels. A security model is an authentication
strategy that is set up for a user and the role in which the user resides. A security level is the permitted
level of security within a security model. A combination of a security model and a security level
determines which security mechanism is employed when handling an SNMP packet.

Assigning SNMP Switch Contact and Location Information

You can assign the switch contact information, which is limited to 32 characters (without spaces) and
the switch location.
To configure contact and location information, using Fabric Manager, follow these steps:
Expand Switches from the Physical Attributes pane. You see the switch settings in the Information pane.
Step 1
Fill in the Location and Contact fields for each switch.
Step 2
Step 3 Click Apply Changes to save these changes or click Undo Changes to discard any unsaved changes.
SNMPv3 CLI User Management and AAA Integration
The Cisco NX-OS software implements RFC 3414 and RFC 3415, including user-based security model
(USM) and role-based access control. While SNMP and the CLI have common role management and
share the same credentials and access privileges, the local user database was not synchronized in earlier
releases.
Cisco MDS 9000 Family Fabric Manager Configuration Guide
40-2
SNMP Version 1 and Version 2c, page 40-2
SNMP Version 3, page 40-2
Assigning SNMP Switch Contact and Location Information, page 40-2
Message integrity—Ensures that a packet has not been tampered with in-transit.
Authentication—Determines the message is from a valid source.
Encryption—Scrambles the packet contents to prevent it from being seen by unauthorized sources.
Chapter 40 Configuring SNMP
OL-17256-03, Cisco MDS NX-OS Release 4.x