Administration of the Avaya G350 Media Gateway - Avaya Support

Configuring SNMPUsersSNMPv3 uses the User-based Security Model (USM) for security, and the View-based AccessControl Model (VACM) for access control. USM uses the HMAC-MD5-96 and HMAC-SHA-96protocols for user authentication, and the CBC-DES56 protocol for encryption or privacy.An unlimited number of uses can access SNMPv3 at the same time.SNMP supports three security levels:● NoAuthNoPriv — This is the lowest level of SNMPv3 security. No MessageAuthentication Code (MAC) is provided with the message, and no encryption is performed.This method maintains the same security level as SNMPv1, but provides a method forlimiting the access rights of the user.●AuthNoPriv — User authentication is performed based on MD5 or SHA algorithms. Themessage is sent with an HMAC that is calculated with the user key. The data part is sentunencrypted.● AuthPriv — User authentication is performed based on MD5 or SHA algorithms. Themessage is sent in encrypted MAC that is calculated with the user key, and the data part issent with DES56 encryption using the user key.Use the snmp-server user command to create a user or to change the parameters of anexisting user. This command includes the following parameters:●●●●●●●Username — A string of up to 32 characters representing the name of the user.Groupname — A string of up to 32 characters representing the name of the group withwhich the user is associated.SecurityModel — The SNMP version functionality that the user is authorized to use.Possible values are: v1 (SNMPv1), v2c (SNMPv2c), and v3 (SNMPv3).Authentication Protocol — The authentication protocol to use. Possible values are:noAuth (no authentication), md5 (HMAC MD5), and sha (HMAC SHA-1).Authentication Password — A string of between 8 and 64 characters specifying theuser’s authentication password. The authentication password is transformed using theauthentication protocol and the SNMP engine ID to create an authentication key.Privacy Protocol — The privacy protocol to use. Possible values are: No privacy,DES privacy.Privacy Password — A string of between 8 and 64 characters specifying the user’sprivacy password.Use the no form of the snmp-server user command to remove a user and its mapping to aspecified group. If you do not specify a group, the no form of the snmp-server usercommand removes the user from all groups.122 Administration of the Avaya G350 Media Gateway