Netopia R5000 User Reference Manual

Contents

Netopia R5000 User Reference Manual Manual pdf 163 page image

Monitoring Tools 12-15By default, the read-only and read/write community strings are set to public and private, respectively. Youshould change both of the default community strings to values known only to you and trusted system adminis-trators.To change a community string, select it and enter a new value.Starting with the version 4.3 firmware, setting the Read-Only and Read-Write community strings to the emptystring will block all SNMP requests to the router. (The router may still send SNMP Traps if those are properlyenabled.)Previously, if either community string was the empty string, SNMP Requests specifying an empty communitystring were accepted and processed.This change is designed to allow the administrator to block SNMP access to the router and to provide moregranular control over the allowed SNMP operations to the router. Setting only the Read-Write community string to the empty string will block SNMP Set Requests to therouter, but Get Requests and Get-Next Requests will still be honored using the Read-Only community string(assuming that is not the empty string). Setting only the Read-Only community string to the empty string will not block Get Requests or Get-NextRequests since those operations (and Set Requests) are still allowed using the (non-empty) Read-Writecommunity string.Even if you decide not to use SNMP, you should change the community strings. This prevents unauthorizedaccess to the Netopia R5000 Series Router through SNMP. For more information on security issues, seeSuggested security measures on page 13-1.SSSSNNNNMMMMPPPP ttttrrrraaaappppssssAn SNMP trap is an informational message sent from an SNMP agent (in this case, the Netopia R5000 SeriesRouter) to a manager. When a manager receives a trap, it may log the trap as well as generate an alertmessage of its own.Standard traps generated by the Netopia R5000 Series Router include the following: An authentication failure trap is generated when the router detects an incorrect community string in areceived SNMP packet. Authentication Traps Enable must be On for this trap to be generated. A cold start trap is generated after the router is reset. An interface down trap (ifDown) is generated when one of the router’s interfaces, such as a port, stopsfunctioning or is disabled. An interface up trap (ifUp) is generated when one of the router’s interfaces, such as a port, beginsfunctioning.The Netopia R5000 Series Router sends traps using UDP (for IP networks).You can specify which SNMP managers are sent the IP traps generated by the Netopia R5000 Series Router. Upto eight receivers can be set. You can also review and remove IP traps.To go to the IP Trap Receivers screen, select IP Trap Receivers. The IP Trap Receivers screen appears.