•
Version 3
If SNMPv3 is selected for the protocol, it is then possible to set the Security Level property. This
can take the following values:
i.
noAuthNoPriv - No authentication and no encryption.
ii.
authNoPriv - SHA-1 authentication but no encryption.
iii.
authPriv - SHA-1 authentication and AES encryption.
If authentication is enabled, a Local User Database object must be selected which contains
the valid username/password pairs that can be used for client access. Often the predefined
AdminUsers database is sufficient if an administrator or auditor username/password
combination will be used as the SNMPv3 credentials.
If encryption is enabled, NetDefendOS will use only AES encryption. NetDefendOS does not
support DES encryption (as specified in the SNMPv3 RFC) as this is generally now considered
to offer inferior security.
The NetDefendOS MIB Files
An important component required by any SNMP client are MIB files. A Management Information
Base (MIB) is a database, usually in the form of a plain text file, that defines the parameters on a
network device that an SNMP client can access.
The MIB files for NetDefendOS are contained with NetDefendOS itself. They are located within a
NetDefendOS folder called SNMP_MIB and have the following names:
•
DLINK-DFL-MIB.mib
•
DLINK-DFL-TRAPS-MIB.mib
Downloading MIB Files
The files listed above can be downloaded directly from NetDefendOS to a management
computer's local disk, either using the Web Interface or Secure Copy (SCP). To do this with the
Web Interface, go to Status > Maintenance > Resources.
if using an SCP client, a typical command line might be the following:
> pscp -l admin -pw admin 192.168.1.17:SNMP_MIB/DLINK-DFL-MIB.mib .
Once on the disk storage of a management computer, the files can be imported by the SNMP
client software.
MIB Entries
Each entry in the MIB includes a textual explanation of what the value is and a complete list is not
reproduced in this guide. A typical MIB file entry for the total number of packets transmitted by
an interface appears as follows:
clvIfPktsTotCnt OBJECT-TYPE
SYNTAX
Counter32
MAX-ACCESS
read-only
Chapter 2: Management and Maintenance
112