Snmpv3 Accounts; Context Names - GE MDS iNET 900 Reference Manual

SNMPv3 Accounts

The following default accounts are available for the SNMP Agent:
—Read/write account using Authentication and Encryp-
enc_mdsadmin
tion
—Read/write account using Authentication
auth_mdsadmin
—Read only account using Authentication and Encryp-
enc_mdsviewer
tion
—Read only account using Authentication
auth_mdsviewer
—Read only account with no Authentication or Encryp-
def_mdsviewer
tion

Context Names

The following Context Names are used (please refer to RFC2574 for full
details):
Admin accounts: / Viewer accounts:
context_a context_v
All accounts share the same default passwords:
Authentication default password: / Privacy default pass-
MDSAuthPwd
word:
MDSPrivPwd
Passwords can be changed either locally (via the console) or from an
SNMP Manager, depending on how the Agent is configured. If pass-
words are configured and managed locally, they are non-volatile and
will survive a power-cycle. If passwords are configured from an SNMP
manager, they will be reset to whatever has been stored for local man-
agement on power-cycle.
This behavior was chosen based on RFC specifications. The SNMP
Manager and Agent don't exchange passwords, but actually exchange
keys based on passwords. If the Manager changes the Agent's password
the Agent doesn't know the new password; just the new key. In this case,
only the Manager knows the new password. This could cause problems
if the Manager loses the password. If that happens, the Agent becomes
unmanageable. Resetting the Agent's passwords (and therefore keys) to
what is stored in flash memory upon power-cycle prevents the serious
problem of losing the Agent's passwords.
If passwords are managed locally, they can be changed on the Agent (via
the console). Any attempts to change the passwords for the Agent via an
SNMP Manager will fail when the Agent is in this mode. Locally
defined passwords will survive a power-cycle.
146 iNET Series Reference Manual 05-2806A01, Rev. J