from the toolbar. The set of information that describes where and how to send a SNMP message is called a 'Target' and consists of three kinds of information:
Destination information, consisting of the network transport protocol, an IP address or host name, and the port.
Message processing parameters, consisting of timeout value, number of retries, and SNMP version (message processing model).
SNMP parameters, consisting of security model (community based or USM), security level, and security name information. For SNMPv3 targets there are additional parameters like engine ID, context, and context engine ID which may be optionally configured.
Targets may be configured for the following purposes:
1. To manage a SNMP agent or proxy agent (also known as command responder).
These targets have typically a host IP address and the default SNMP port 161.
2. To send traps/notifications or Inform requests to a trap receiver application (also known as command generator).
These targets have typically a host IP address and the SNMP trap port 162.
3. To discover SNMP agents in a (sub) network.
These targets may have a broadcast IP address.
Targets are configured by using the target and user editor which provides two tabs with two tables. The first table is used to configure targets and the other is used to configure USM users. The topmost entry in the target table is always the active target. Both tables can be sorted by abitrary columns by clicking on the column headers.
To Edit Targets:
1. Choose from the menu or from the toolbar.
2. Edit the targets as described by “Adding a New Target” on page 45 and “Removing a Target” on page 47.
3. Save your changes by pressing .
7.2 Selecting the Active Target
To select the target you want to work with:
1. Select the target from the combo-box in the toolbar.
2. Open the Targets editor by choosing , select the target you want to use, and then choose from the context menu or select the checkbox in the first column named "".
Although targets may be used for different purposes, they are created in the same way. Only the used address/port distinguishes between agent, trap, or discovery targets.
To Add a New Target:
1. From the menu choose (
). A modal dialog will be shown.
2. Choose the tab.
3. Press the button.
4. A new row will be inserted into the target configuration table and the target name editor is activated.
5. Enter an unique name for the target.
6. Select the transport mapping (UDP, TCP or TLS) with which the target can be accessed from the column.
7. Enter the IP address and port of the target separated by a slash (/). You can also enter a hostname if the target uses Dynamic Host Configuration Protocol (DHCP) to determine its IP address. If you want to access the SNMP of your local system, you can either enter 127.0.0.1/161, 127.0.0.1, localhost/161, or localhost which are all the same. Additional examples are:
switch01:1161 - Switch on non-standard port 1161
92.168.0.1:162 - A trap target using standard trap port 162
255.255.255.255 - Discovery target using an IPv4 broadcast address (only works with UDP)
92.168.0.255:4700 - Discovery target for port 4700 in class C network 192.168.0
080::8:800:200C:417A - An IPv6 address.
FFFF:129.144.52.38/161 - An standard IPv4 address in IPv6 format.
8. Select the SNMP version for the target:
SNMPv1
Community based weak security
No GETBULK
SNMPv2c
Community based weak security
GETBULK
SNMPv3
Strong security using the User Security Model (USM) or the Transport Layer Security Model (TSM).
GETBULK
9. Choose the value and the number of .
10.Choose the MIB set you want to associate with the target from the drop down list. Select the empty entry, if you do not want to associate any MIB set with the target.
11.If you have chosen or as SNMP version then enter the community to be used with the target.
12.Otherwise, if you have chosen then select an USM user from the dropdown list. If you need to add a new user then create it using .
13.You can continue to specify the optional SNMPv3 security parameters engine ID, context name, and context engine ID as described below.
14.Save the new target into MIB Explorer's configuration by pressing .
To Configure Optional SNMPv3 Security Parameters:
1. Use the menu item from the context menu to discover the targets Engine ID. Leaving the engine ID field empty will let MIB Explorer discover the target's engine ID automatically, once for each session.
2. Enter the to be used with the target as plain text. The default is an empty string.
3. Enter the which selects the subsystem or proxy as a plain text or hexadecimal string, for example 0f:ab:12:A:g5 (use the context menu to change the input format). The default is an empty string. In this case, MIB Explorer will use the entered or discovered engine ID as context engine ID.
1. From the menu choose (
). A modal dialog will be shown.
2. Choose the tab.
3. Select the target to delete from the by clicking on it (using the column).
Removing a target will not invalidate monitor configurations using that target, however the removed target will no longer available for the discovery configuration after restarting MIB Explorer.
4. Press the button.
5. Select a target you want to work with and choose from the context menu or select the corresponding checkbox in the column .
6. Press the button.
A SNMPv1/SNMPv2c community contains one agent and one or more managers. A community is named by a string of octets which is called a community string . Although many SNMP developers and users believe that a community string is a password, its originally intended use was not that simple. Nevertheless, many agent implementations are using a community string as password for read-only access and another for read-write access.
Community strings are send as plain text over the wire.
With MIB Explorer you can specify a single community for each target that is used for all request types.
The User based Security Model (USM) associates a user name with security information and is defined in RFC 2574. A USM user consists of:
User Name
An internal name for the user. In most cases this name would match the security name. The user name must be unique within a MIB Explorer configuration.
Security Name
Identifies the user. The security name is used to refer to an user in many MIBs, in particular the SNMP-VIEW-BASED-ACM-MIB maps security model/name combinations to groups in the VACM. Without such a mapping a USM user cannot access any MIB information in an agent.
Authentication Protocol
Determines which authentication protocol (no authentication, MD5 or SHA) can be used with this user.
Authentication Passphrase
If the authentication protocol is MD5 or SHA, an authentication passphrase has to be entered, which will be combined with the target's SNMP engine ID to form the localized authentication key by using the selected hashing algorithm.
If you do not provide a Localization Engine ID for a USM user then the target's engine ID will be used to localize passphrases on-the-fly. The USM user can thus be used securely for several SNMP targets.
If you provide a Localization Engine ID then this user can only be used with a target whose authoritative engine ID equals the used localization engine ID.
To enter a pass phrase in hexadecimal format, use the context menu to change the input format.
Privacy Protocol
Determines which privacy protocol (no privacy, DES, 3DES, AES128, AES196, or AES256) is used with this user.
The nonstandard privacy protocols AES192-KeyExt3DES and AES256-KeyExt3DES are provided to ensure interoperability with some devices that implemented AES 192 and 256 privacy with a key extension algorithm specified for 3DES. Although, that combination was never specified by an IETF RFC or draft, it has been implemented by some manufactures.
Privacy Passphrase
If the privacy protocol DES is selected then the entered privacy passphrase is localized with the selected authentication protocol (analogous to localizing an authentication passphrase) and then used to encrypt/decrypt SNMP messages.
Localization Engine ID
The localization engine ID can be left empty by default. However, if two targets use the same security name with different passphrases and/or authentication/privacy protocols then you need to localize each user for its specific engine ID to avoid clashes. You can localize the passphrases of an user easily by using from the context menu. It prompts for the target engine ID used for the localization in hexadecimal format. Once you press , the passphrases are localized and the entered localization engine ID is stored with the USM user security credentials.
MIB Explorer abstracts from security names by using . The is independent from the user's security name. Nevertheless, it makes sense to choose the profile name according to an user's security name for better readability.
Please note that adding a new user to MIB Explorer's configuration does not create that user in the USM MIB of the target for which you added the user. To create a new user in the USM MIB of one or more targets, use the SNMPv3 user administration (See “SNMPv3 User Administration (Pro Edition)” on page 156.).
To Add a USM User Profile:
1. Select Targets from the menu.
2. Press the button from the toolbar. The tab will be shown and a new row at the bottom of the table will be inserted. The user name column editor is activated, so you can press <Ctrl>-A and then directly begin to enter the name of the USM user profile.
3. Enter a unique name for the user profile. If possible, the profile name should be equal to the security name of the user.
4. Enter the properties of the USM user (See “USM Users” on page 47.).
5. Press the button.
A user profile can be deleted from MIB Explorer's configuration if there is not any target using that profile any more. Otherwise a different user has to be selected for those targets first. Deleting a user profile does not delete the corresponding USM user in the SNMP agent associated with the target. In order to delete a user from the USM MIB of an agent use the SNMPv3 user administration.
To Remove a User Profile:
1. From the Edit menu choose (
). A modal dialog will be shown.
2. Choose the tab.
3. Select the user profile to be deleted.
4. Press the button to delete the profile. If other targets are also referencing that user an error message will be displayed and the profile will not be deleted.
5. Press the button to finally commit your change.