Configuring System Settings : Configuring SNMPv3 settings
  
Configuring SNMPv3 settings
You configure SNMPv3 settings in the SNMP v3 page.
SNMPv3 provides additional authentication and access control for message security. For example, you can verify the identity of the SNMP entity (manager or agent) sending the message.
Using SNMPv3 is more secure than SNMPv1 or SNMPv2; however, it requires more configuration steps to provide the additional security features.
Basic steps
This process is comprised of these procedures:
1. Create the SNMP-server users. Users can be authenticated using either a password or a key.
2. Configure SNMP-server views to define which part of the SNMP MIB tree will be visible.
3. Configure SNMP-server groups, which map users to views, allowing you to control who can view what SNMP information.
4. Configure the SNMP-server access policies that contain a set of rules defining access rights. Based on these rules, the entity decides how to process a given request.
To create users for SNMPv3
1. Choose Administration > System Settings: SNMP v3 to display the SNMP v3 page.
2. Under Users, complete the configuration as described in this table.
Control
Description
Add a New User
Displays the controls to add a new user.
User Name
Specify the username.
Authentication Protocol
Select an authentication method from the drop-down list:
• MD5—Specifies the Message-Digest 5 algorithm, a widely used cryptographic hash function with a 128-bit hash value. This is the default value.
• SHA—Specifies the Secure Hash Algorithm, a set of related cryptographic hash functions. SHA is considered to be the successor to MD5.
Authentication
Optionally, select either Supply a Password or Supply a Key to use for authenticating users.
MD5 Key
(Appears only if you select Supply a Key). Specify the MD5 key.
Password/Password Confirm
(Appears only if you select Supply a Password). Specify a password. The password must have a minimum of eight characters. Confirm the password in the Password Confirm text box.
Use Privacy Option
Select the check box to enable privacy option.
• Privacy Protocol—Select AES or DES from the drop-down menu.
• Privacy—Select the password or key option from the drop-down menu. Depending on the option selected, you might need to specify an additional password or key value.
Add
Adds the user.
Remove Selected
Select the check box next to the name and click Remove Selected.
3. Click Add to apply your changes to the running configuration.
4. Click Save to save your settings permanently.