BigIron RX Series Configuration Guide 100353-1001810-01Using the user-based security model 36Displaying the SNMP community stringsTo display the configured community strings, enter the following command at any CLI level.BigIron RX(config)# show snmp serverSyntax: show snmp serverNOTEIf display of the strings is encrypted, the strings are not displayed. Encryption is enabled by default.Using the user-based security modelSNMP version 3 (RFC 2570 through 2575) introduces a User-Based Security model (RFC 2574) forauthentication and privacy services.SNMP version 1 and version 2 use community strings to authenticate SNMP access tomanagement modules. This method can still be used for authentication. In SNMP version 3, theUser-Based Security model of SNMP can be used to secure against the following threats:• Modification of information• Masquerading the identity of an authorized entity• Message stream modification• Disclosure of informationFurthermore, SNMP version 3 supports View-Based Access Control Mechanism (RFC 2575) tocontrol access at the PDU level. It defines mechanisms for determining whether or not access to amanaged object in a local MIB by a remote principal should be allowed. (Refer to “Defining SNMPviews” on page 1009.)NOTESNMP version 3 Notification is not supported at this time. The system will generate traps in SNMPversion 1 format.NOTESNMP may timeout when trying to get module temperature values. You must increase the timeoutvalue to 10 seconds to prevent a timeout.Configuring your NMSTo be able to use the SNMP version 3 features.1. Make sure that your Network Manager System (NMS) supports SNMP version 3.2. Configure your NMS agent with the necessary users.3. Configure the SNMP version 3 features in the BigIron RX.
