Model 5399 Remote Access Concentrator Network Administrator’s Guide for UNIXChapter 2 Simple Network Management Protocol (SNMP)A-62Book ATable B-17. Supported SNMP CommandsWhen the allow_snmp_sets parameter is enabled, the 5399 RAC acceptsSNMP set commands from IP hosts addreses and communities that haveRead-write access permissions. When disabled, the 5399 RAC rejects allSNMP set commands; the 5399 RAC SNMP agent returns the error nosuch name for the first object in the set command (for more details, seearap_v42bis on page A-41).SNMP version 1 is inherently a non-secure protocol. SNMP bypasses theAnnex’s security measures. If security is a concern, the administratorshould consider taking the following security measures:• Define the community strings for specific IP addresses withRead-write access.• Disable all other SNMP access by defining None or Read-onlyaccess.• Institute filters on any firewall router to block SNMP traffic fromoutside the local network. This is good practice in all cases, notjust concerning the Annex.Action Descriptionget Retrieves the value of a specific object from one of thesupported MIBs.get-next Traverses the MIB tree to retrieve the next object’s managementinformation.set Modifies the values of MIB objects. The 5399 RAC privateenterprise MIB and several objects in the standard MIBs allowyou to configure the 5399 RAC from an SNMP managementstation on the network rather than using the na utility or CLIadmin command.trap Asynchronously reports significant events.
