Administration of the Avaya G350 Media Gateway - Avaya Support

SNMP versionsSNMPv1SNMPv1 uses community strings to limit access rights. Each SNMP device is assigned to aread community and a write community. To communicate with a device, you must send anSNMP packet with the relevant community name.By default, if you communicate with a device using only the read community, you are assignedthe security name ReadCommN. This security name is mapped to the ReadCommG group bydefault. This allows you to view the agent’s MIB tree, but you cannot change any of the valuesin the MIB tree.If you communicate with a device using the write community, you are assigned the securityname WriteCommN. This security name is mapped to the WriteCommG group by default. Thisallows you to view the agent’s MIB tree and change any of the values in the MIB tree.Note:Note: If you delete the ReadCommN or WriteCommN users, the ReadCommG orWriteCommG groups, or the snmpv1WriteView or snmpv1View, you may not beable to access the device using SNMPv1 or SNMPv2c.In addition, traps are sent to designated trap receivers. Packets with trap information alsocontain a trap community string.SNMPv2cSNMPv2c is very similar to SNMPv1. However, SNMPv2c adds support for the get-bulk actionand supports a different trap format.SNMPv3SNMPv3 enables the following features over SNMPv1 or v2c:●●●●●User authentication with a user name and password.Communication encryption between the Network Management Station (NMS) and theSNMP agent at the application level.Access control definition for specific MIB items available on the SNMP agent.Notification of specified network events directed toward specified users.Definition of roles using access control, each with unique access permissions andauthentication and encryption requirements.The basic components in SNMPv3 access control are users, groups, and views. In addition,SNMPv3 uses an SNMP engine ID to identify SNMP identity. An SNMP engine ID is assigned toeach MAC address of each device in the network. Each SNMP engine ID should be unique inthe network.Issue 3 January 2005 121