Administrator's Guide

SNMP

Simple Network Management Protocol (SNMP) is a set of network-management protocols used to manage authentication of data messages. It defines the data-message structure and protocols for exchanging data messages.

SNMP community

An access-control mechanism supported by SNMPv1 that allows management workstations within a range of IP addresses to access the IBM IP Storage. You can define an IP address and subnet mask of 0.0.0.0 if you want to allow any IP address to access the community.

SNMP user

An access-control mechanism supported by SNMPv3 that requires a user name and a password for authentication. The user receives SNMP messages.

SNMP traps

Asynchronous data messages sent through SNMP are known as traps. Traps signal the occurrence of some event in the appliance.

IBM IP Storage supports these portions of the management information base (MIBs) for SNMP:

• MIB II (RFC1213)
• DPI MIB (RFC1592b)
• SNMP Framework MIB (RFC2571)
• SNMP MDP MIB (RFC2572)
• SNMP Target MIB (RFC2573)
• SNMP View-based ACM MIB (RFC2575)
• Ethernet MIB (RFC2665)
• MIB II Extensions (RFC2863)

For more information about these MIBs, refer to www.faqs.org.rfcs/

Enabling or disabling SNMP

To enable or disable SNMP using the Administrative Console:

1. Click Network --> SNMP --> Enable/Disable.
2. Select the Enable SNMP check box to enable SNMP or clear the check box to disable SNMP.
3. Click Apply.
4. Restart the appliance (see Restarting the appliance).

SNMP communities

If your management workstation supports SNMPv1, you can define SNMP communities for authentication purposes.

Viewing the list of SNMP communities

To view the list of defined SNMP communities using the Administrative Console, click Network --> SNMP --> Community. The following information is displayed for each SNMP community:

SNMP community name

The name of the SNMP community

IP Address

The IP address of the management workstation

Subnet mask

The subnet mask of the management workstation

Adding an SNMP community

To add an SNMP community using the Administrative Console:

1. Click Network --> SNMP --> Community.
2. Click Add.
3. Type the name of the community in the Community namefield.
4. In the IP address field, type the range of IP addresses that can be used for this community. You can define an IP address and subnet mask of 0.0.0.0 if you want to allow any IP address to access the community.
5. In the Mask field, type the subnet mask that can be logically associated with the address of the incoming SNMP message.
6. Select the Read check box to give the community read access.
7. Select the Write check box to give the community read-write access.
8. Select the Trap check box to allow this community to receive notification of traps (asynchronous events). You must also define an SNMP trap associated with this community name. If you want to turn off traps temporarily, you can clear the Trap check box. If you want to remove traps completely, you must turn off traps and remove the record of the community.
9. Click Apply to create the SNMP community.

Modifying an SNMP community

To edit an SNMP community using the Administrative Console:

1. Click Network --> SNMP --> Community.
2. Select the check box to the left of the SNMP community that you want to edit. To select all of the SNMP communities listed, select the check box at the top of the list.
3. Click Edit to view the SNMP community configuration.
4. Modify the appropriate fields.
5. Click Apply to save the changes.

Removing an SNMP community

To remove an SNMP community using the Administrative Console:

1. Click Network --> SNMP --> Community.
2. Select one or more check boxes to the left of the SNMP communities that you want to remove.
3. Click Remove to remove the SNMP communities.
4. Click OK to confirm the deletion.

SNMP users

You can create SNMP users if the management workstation supports SNMPv3.

Viewing the list of SNMP users

To view the list of SNMP users from the Administrative Console, click Network --> SNMP --> User.

Adding an SNMP user

To add an SNMP user using the Administrative Console:

1. Click Network --> SNMP --> User.
2. Click Add.
3. Type the ID of the user in the User name field.
4. Select an authentication protocol from the Authentication protocol drop-down list. The protocol that you select must be supported by the management workstation. You can select one of the following values:
   • None
   • MD5
   • SHA
5. You can select a privacy protocol only if you define an authentication protocol. Privacy must be defined at both the management workstation and the appliance. Select the privacy protocol from the Privacy protocol drop-down list. The privacy protocol must be supported by the management workstation. You can select one of the following values:
   • None
   • DES
6. Type a password for the user in the Password field.
7. Select the Localized key or Nonlocalized key radio button to indicate whether you want to use the key at only one appliance or at multiple appliances. If the key is generated locally, you can communicate only with a single appliance. Localized keys are more secure than nonlocalized keys, but the level of security must be supported by the management workstation. If you select Nonlocalized key, the key can be used by multiple appliances.
8. Select the Read check box to give the user read access.
9. Select the Write check box to give the user read-write access.
10. Select the Trap check box if you want this user to receive traps. You must also define an SNMP trap associated with this user.
11. Select Apply to add the SNMP user.

Modifying an SNMP user profile

To edit an SNMP user profile using the Administrative Console:

1. Click Network --> SNMP --> User.
2. Select the check box to the left of the SNMP user that you want to edit.
3. Click Edit to view the SNMP user profile.
4. Modify the appropriate fields.
5. Click Apply to save the changes.

Removing an SNMP user

To removing an SNMP user using the Administrative Console:

1. Click Network --> SNMP --> User.
2. Select one or more check boxes to the left of the SNMP users you want to remove.
3. Click Remove to remove the selected SNMP users.
4. Click OK to confirm the deletion.

SNMP traps

Asynchronous data messages sent through SNMP are known as traps. Traps signal the occurrence of some event in the appliance. If you select the Traps check box when you are creating an SNMP user or community, you must create a corresponding trap for the user or community to receive notifications of traps.

Viewing the list of SNMP traps

To view the list of SNMP traps using the Administrative Console, click Network --> SNMP --> Traps.

Adding an SNMP trap

To define an SNMP trap using the Administrative Console:

1. Click Network --> SNMP --> Traps.
2. Click Add.
3. Type a name for the trap in the Target address name field.
4. Type the IP address of the management workstation in the Target address field.
5. Type the port number of the management workstation in the Port field.
6. Select the level of SNMP that is supported by the management workstation:
   • SNMPv1
   • SNMPv3
7. Associate the trap with a user or community. Select an SNMP user if the management workstation supports SNMPv3 or an SNMP community if the management workstation supports SNMPv1 from the Security information drop-down list.
8. Click Apply to add the SNMP trap.

Modifying an SNMP trap

To modify an SNMP trap using the Administrative Console:

1. Click Network --> SNMP --> Traps.
2. Select the check box to the left of the SNMP trap that you want to modify.
3. Click Edit to view the SNMP trap configuration.
4. Modify the appropriate fields.
5. Click Apply to save the changes.

Removing an SNMP trap

To remove an SNMP trap using the Administrative Console:

1. Click Network --> SNMP --> Traps.
2. Select one or more check boxes to the left of the SNMP traps that you want to remove.
3. Click Remove to remove the SNMP traps. To remove a trap completely, you must also turn off the Trap check box in the SNMP user or community definition.
4. Click OK to confirm the deletion.