| IT |
Authenticate access to management information base MIB objects and function as embedded passwords (Examples are: Read-only (RO)-Gives read access to all objects in the MIB except the community strings, but does not allow write access Read-write (RW)-Gives read and write access to all objects in the MIB, but does not allow access to the community strings Read-write-all-Gives read and write access to all objects in the MIB, including the community strings (only valid for Catalyst 4000, 5000 and 6000 series switches). Simple Network Management Protocol (SNMP) community strings are sent across the network in cleartext. The best way to protect an operating system (OS) software-based device from unauthorized SNMP management is to build a standard IP access list that includes the source address of the management station(s). Multiple access lists can be defined and tied to different community strings. If logging is enabled on the access list, then log messages are generated every time that the device is accessed from the management station. The log message records the source IP address of the packet) |
