SNMP Setting

Context

SNMP agent is an agent program on the managed device. The SNMP agent maintains information for the managed device, responds to the requests from the NMS, and sends management data to the NMS. Before the NMS manages a device through SNMP, the SNMP agent must be enabled on the device and a proper SNMP version needs to be selected.

A web system supports SNMPv1, SNMPv2c and SNMPv3. The device and NMS must use the same SNMP version.

NOTE:

If a device is managed by multiple NMSs running different SNMP versions, all the SNMP versions need to be set on the device so that the device can communicate with these NMSs.

**Table 1** Usage scenarios of SNMP
Version	Usage Scenario
SNMPv1	Applicable to small networks with simple networking and low security requirements or small networks with good security and stability, such as campus networks and small enterprise networks.
SNMPv2c	Applicable to medium and large networks with low security requirements or with good security but on which services are so busy that traffic congestion may occur.
SNMPv3	Applicable to networks of various scales, especially networks that have strict security requirements and can be managed only by authorized network administrators. For example, SNMPv3 can be used if data between the NMS and managed device needs to be transmitted over a public network.

The community/group management configurations vary with SNMP versions. After global SNMP settings are complete, configure the communities/groups. Table 2 lists the mappings between SNMP versions and configurations.

**Table 2** Mappings between SNMP versions and community/group configurations
Version	Configuration
SNMPv1	Community management
SNMPv2c	Community management
SNMPv1 and SNMPv2c	Community management
SNMPv3	Group management and user management
SNMPv1 and SNMPv3	Community management, group management and user management
SNMPv2c and SNMPv3	Community management, group management and user management
SNMPv1, SNMPv2c, and SNMPv3	Community management, group management and user management

Procedure

Choose Maintenance > System Maintenance > SNMP and click the SNMP Setting tab.

For SNMP parameters, see Table 3.

**Table 3** SNMP configuration items
Parameter	Description
SNMP	Indicates the SNMP Agent status: ON: SNMP Agent is enabled. OFF: SNMP Agent is disabled. To manage devices using the NMS, enable the SNMP Agent function.
Version number	Indicates the SNMP version on the device. SNMPv1, SNMPv2c and SNMPv3 are supported. Choose one or multiple versions. Ensure that the SNMP versions on the device and on the NMS are the same. NOTE: SNMPv1 and SNMPv2c are not secure. SNMPv3 is recommended.
Community name	Indicates the read/write community name of SNMPv1, SNMPv2c and SNMPv3. This is the password that the NMS uses to perform the read and write operations on the SNMP agent. The password configured on the SNMP agent must be the same as that configured on the NMS.
Confirm community name	Confirms the community name. It must be the same as the community name.
Clear Community	Deletes all community names.

If SNMPv3 is used, you need to configure groups and users.

Click Create in Group to open the Create Group page.

Table 4 describes parameters on the displayed page.

**Table 4** Create Group
Parameter	Description
Group Name	Indicates the SNMPv3 user group.
Security Level	Indicates the security level of the SNMPv3 user group: No-auth&no-encrypt Auth&no-encrypt Auth&encrypt NOTE: When No-auth&no-encrypt is selected, there is a security risk. The Auth&encrypt mode is recommended.
ACL	Indicates the access control list for group management by the NMS on the device. Click and select an ACL in the dialog box.

Set the required parameters.
Click OK to complete the configuration.

Click Create in User to open the Create User page. The configuration items vary according to the security level.

Set the security level to No-auth&no-encrypt.

Table 5 describes parameters on the displayed page.

**Table 5** Create a user - No-auth&no-encrypt
Parameter	Description
User Name	Indicates the SNMPv3 user name.
ACL	Indicates the access control list for group management by the NMS on the device. Click and select an ACL in the dialog box.
Group Name	Indicates the user group to which users are added.

Set the security level to Auth&no-encrypt.

Table 6 describes parameters on the displayed page.

**Table 6** Create a user - Auth&no-encrypt
Parameter	Description
User Name	Indicates the SNMPv3 user name.
Authentication protocol	Indicates the authentication protocol: MD5: HMAC-MD5-96 SHA: HMAC-SHA-96
Authentication password	Indicates the authentication password.
Confirm authentication password	Confirms the authentication password. It is the same as the authentication password.
ACL	Indicates the access control list for group management by the NMS on the device. Click and select an ACL in the dialog box.
Group Name	Indicates the user group to which users are added.

Set the security level to Auth&encrypt.

Table 7 describes parameters on the displayed page.

**Table 7** Create a user - Auth&encrypt
Parameter	Description
User Name	Indicates the SNMPv3 user name.
Authentication protocol	Indicates the authentication protocol: MD5: HMAC-MD5-96 SHA: HMAC-SHA-96
Authentication password	Indicates the authentication password.
Confirm authentication password	Confirms the authentication password. It is the same as the authentication password.
Encryption protocol	Indicates the encryption protocol: 3DES AES128 AES192 AES256 DES56
Encryption password	Indicates the encryption password.
Confirm encryption password	Confirms the encryption password. It is the same as the encryption password.
ACL	Indicates the access control list for group management by the NMS on the device. Click and select an ACL in the dialog box.
Group Name	Indicates the user group to which users are added.

Set the required parameters.
Click OK.

Click Apply to complete the configuration.