Configuring the SNMP Protocol

Procedure

1. Choose Settings > System Settings > SNMP Protocol.

2. Configure the SNMP protocol.
   Set basic SNMP protocol information. Table 1 describes related parameters.

   Table 1 SNMP protocol parameters

   Parameter	Description
   Port	Indicates the SNMP port number. The default value is 161 and cannot be modified.
   Context Name	Indicates the name of a context engine. This parameter must be set to the context name specified on the network element.
   SNMPv1 and SNMPv2c	If this option is enabled, the system uses SNMPv1 and SNMPv2c. NOTE: Enabling SNMPv1 and SNMPv2c causes security risks. You are advised to disable this option.
   Community	Click Modify to change the read and write communities. NOTE: This parameter can be set only after you enable SNMPv1 and SNMPv2c.
   Read Community	Indicates the read community used for reading device information. NOTE: This parameter can be set after you click Modify.
   Confirm Read Community	Confirms the read community.
   Write Community	Indicates the write community used for reading device information or configuring devices. NOTE: This parameter can be set after you click Modify.
   Confirm Write Community	Confirms the write community.

3. Manage USM users.
   • Add a USM user.
     1. Click Add.

        The Add USM User page is displayed on the right.

     2. Set USM user information. Table 2 describes related parameters.

        Table 2 USM user parameters

        Parameter	Description
        Username	Indicates the USM user name. NOTE: The name must be unique. The name contains 4 to 32 characters. The name can contain only letters, digits, underscores (_), and hyphens (-), and must start with a letter.
        User Permission	Indicates the permission of the USM user. Possible options are Read and write and Read-only.
        User Authentication	Indicates whether to enable user authentication. Security risks arise if user authentication is disabled. You are advised to enable user authentication and select the SHA512 authentication algorithm.
        Authentication Algorithm	Indicates the algorithm used to authenticate the USM user. Possible options are MD5, SHA, SHA224, SHA256, SHA384, and SHA512.
        Authentication Password	Indicates the authentication password of the USM user. The following requirements must be met: The password length varies with the SNMP security policy. The password must contain at least three types of the following characters: uppercase letters, lowercase letters, digits, and special characters. The password must be different from the user name or the reverse of the user name. The password cannot contain completely identical strings. You are advised to set a password with high security based on the password complexity requirements.
        Confirm Authentication Password	Confirms the authentication password of the USM user.
        Data Encryption	Indicates whether to enable data encryption. Enabling data encryption improves security. You are advised to enable it.
        Encryption Algorithm	Indicates the encryption protocol used by the USM user. Possible options are DES, 3DES, AES128, AES192, and AES256.
        Data Encryption Password	Indicates the data encryption password used by the USM user. The following requirements must be met: The password length varies with the SNMP security policy. The password must contain at least three types of the following characters: uppercase letters, lowercase letters, digits, and special characters. The password must be different from the user name or the reverse of the user name. The data encryption password must be different from the authentication password. The password cannot contain completely identical strings. You are advised to set a password with high security based on the password complexity requirements.
        Confirm Data Encryption Password	Confirms the data encryption password used by the USM user.

     3. Click OK.
   • Delete a USM user.
     1. Select the desired user and click Delete.
     2. Confirm your operation as prompted.
   • Modify the USM user information.
     1. Select the desired user and click Modify.
     2. The Modify USM User page is displayed on the right. You can modify the USM user information as required. For details about the parameters, see Table 2.

4. Click Save.