Placing An Inet Radio Behind A Firewall; Snmpv3 Notes; Overview - GE MDS iNET 900 Reference Manual

05-2806A01, Rev. J

4.4.9 Placing an iNET Radio Behind a Firewall

iNET-II and iNET radios use the port numbers listed below. If you place
the radio behind a firewall, make sure these port numbers are included
in the allowed list:
• SSH: 22
• TELNET: 23
• SMTP: 25
• TFTP: 69
• HTTP: 80
• NTP: 123
• SNMP: 161
• SNMP-TRAP: 162
• HTTPS: 443
• SYSLOG: 514
These well-known port numbers follow the recommendation of IANA.
For more information, go to
http://www.iana.org/assignments/port-numbers.

4.5 SNMPv3 NOTES

4.5.1 Overview

The transceiver's SNMP Agent supports SNMP version 3 (SNMPv3).
The SNMPv3 protocol introduces Authentication (MD5/SHA-1),
Encryption (DES), the USM User Table, and View-Based Access
(Refer to RFC2574 for full details). The SNMP Agent has limited
SNMPv3 support in the following areas:
• Only MD5 Authentication is supported (no SHA-1). SNMPv3
provides support for MD5 and SHA-1. Currently, only MD5
Authentication is supported in the SNMP Agent.
• Limited USM User Table Manipulation. The SNMP Agent
starts with 5 default accounts. New accounts can be added
(SNMPv3 adds new accounts by cloning existing ones), but
they will be volatile (will not survive a power-cycle).
New views cannot be configured on the SNMP Agent. Views
will be inherited for new accounts from the account that was
cloned.
The SNMP Agent uses one password pair (Authentication / Pri-
vacy) for all accounts. This means that when the passwords
change for one user, they change for all users.
iNET Series Reference Manual
<- Management
<- Management
<- DF1
<- Reprogramming
<- Management
<- Time server
<- Management
<- Event management via traps
<- Management
<- Event management via remote syslog
server
145