Authorization/Device Access
Profiles/Credentials Tab


NetSight applications access devices to control certain device functions (SNMP sets) and retrieve information for device properties views, FlexViews and periodic polling (SNMP gets). This tab lets you manage credentials that define the access privileges required for SNMPv1, SNMPv2, and SNMPv3, and profiles that use the credentials for various access levels. Two elements are involved with access management:
Click areas in the window for more information.

Default Profile:
This drop-down list lets you specify a profile that will be used by default to access a device.
Profiles Table
This table lists all of the profiles that have been created.
The public_v1_Profile is automatically created during Console installation and cannot be deleted.
Name
This is the name assigned when the profile was created.
Version
This is the SNMP protocol version for the profile. Profiles can be configured for SNMPv1, SNMPv2c, or as SNMPv3.
Read, Write, Max Access Credential
When the Version is SNMPv1 or SNMPv2c, the Read, Write, and Max Access columns in the table contain the Community Name for each access level. When the Version is SNMPv3, the Read, Write, and Max Access columns in the table contain the credential specified for each access level.
Credentials Table
This table lists all of the credentials that have been created in the NetSight database. The public_v1 credential is automatically created during Console installation and cannot be deleted.
Name
This column lists names assigned to credentials that have been created in the NetSight database.
Version
This is the SNMP protocol version for the credential. Credentials can be configured for SNMPv1, SNMPv2c, or as SNMPv3.
Community
For SNMPv1 or SNMPv2c credentials, this is the Community Name used for device access.
User Name
For SNMPv3 credentials, this is the User Name used for device access.
Auth Type, Priv Type
For SNMPv3 credentials, these columns show the authentication protocol (None, MD5, or SHA) and privacy protocol (None or DES) used by the credential.
Show passwords in clear text
When this option is checked, passwords and community names appear as text. The default setting for this option is unchecked, and passwords and community names appear as a string of asterisks.

Buttons

Add Profile
Opens the Add Profile window where you can select the SNMP version and define the profile name and passwords/community names used by the profile.
Edit (Profile)
Opens the Edit Profile window where you can modify the SNMP version and passwords/community names used by a selected profile.
Delete (Profile)
Removes the selected Profile from the Groups table. You cannot delete the profile that is currently selected to be the Default Profile.
Add Credential
Opens the Add Credential window where you can define new credentials.
Edit (Credential)
Opens the Edit Credential window where you can modify a credential selected from the Credentials table.
Delete (Credential)
Removes a selected credential from the Credentials table.

Add/Edit Profile Window

This window lets you define the SNMP Credentials for SNMPv1/SNMPv2 Community Names and for SNMPv3 users that will be granted access to your network devices. The Add Profile window lets you create a new profile and the Edit Profile window lets you modify an existing profile.
Click areas in the windows for more information.

Add or Edit Profile Windows

Profile Name
A unique name (up to 32 characters) that you assign to this profile.

When editing an existing profile, you can select a profile from the table to modify its settings. However, you cannot change the name of an existing profile.

SNMP Version
This is the SNMP protocol version for the profile. Profiles can be configured for SNMPv1, SNMPv2c, or as SNMPv3. When either SNMPv1 or SNMPv2c is selected, the editor provides fields where you can configure access levels using Community Names. With SNMPv3 selected, you can configure access levels using Credentials and Security Levels.
Read, Write, Max Access
SNMPv1, SNMPv2c
The Read, Write, Max Access define the community names used for these levels of access.
  • Read - This Community Name is used for get operations.
  • Write - This Community Name is used for set operations.
  • Max Access - This Community Name is used for set operations that require administrative access, such as changing community names.
SNMPv3
The Read, Write, Max Access levels are defined by Credentials and Security Level:
Credentials
Credential Names are assigned to each of the three SNMPv3 access levels that are used for the Read, Write and Max Access operations.
  • Read - used for read operations (gets).
  • Write - used for write operations (sets).
  • Max Access - used for write operations (set ) that require administrative access.
Security Level
Each access level can be assigned a security level:
  • AuthPriv - Highest security level requiring authentication and privacy (encrypted information).
  • AuthNoPriv - Requires authentication, but unencrypted information.
  • NoAuthNoPriv - Neither authentication nor privacy required.

Add/Edit Credential Window

This window lets you define or edit the names and community names/passwords for credentials. 

Click areas in the window for more information.

Add/Edit Credential Window

Credential Name
A unique name (up to 32 characters) that you assign to this access credential. You can define a new credential or select a name from the table to modify settings for an existing credential. You cannot edit the name of an existing credential.
SNMP Version
This is the SNMP protocol version for the credential. Credentials can be configured for SNMPv1, SNMPv2, or as SNMPv3. When either SNMPv1 or SNMPv2 is selected, the window provides fields where you can configure access levels using Community Names. With SNMPv3 selected, you can configure access levels using Authentication and Privacy Types.
Community Name
For SNMPv1 or SNMPv2c credentials, this is the Community Name used for device access.
User Name
For SNMPv3 credentials, this is the User Name used for device access.
Authentication Type
For SNMPv3 credentials, select MD5, SHA1, or None, from this drop-down list .
Specify/Confirm Password
This is the password (between 1 and 64 characters in length) that will be used to determine Authentication. These fields are disabled for Authentication Type, None. If an existing password is changed and the credential is currently used with a profile that is applied to one or more devices, a confirmation dialog is opened to determine how the changes will be handled. You will be asked if you want to change the password on the device(s). You can then select the devices where the password will be changed and, if this user is a valid user on the device(s), then the new password will be set on the device.

  NOTE: SNMPv1 profiles can be set on device(s) using Console's Set Profile on Device feature of the Properties (Access) tab.

Privacy Type
For SNMPv3 credentials, select DES or None from this drop-down list. These settings are disabled if Authentication Type None is selected.
Specify/Confirm Password
This is the password (between 1 and 64 characters in length) that will be used to determine Privacy. These fields are disabled for Privacy Type, None. If an existing password is changed and the credential is currently used with a profile that is applied to one or more devices, a confirmation dialog is opened to determine how the changes will be handled. You will be asked if you want to change the password on the device(s). You can then select the devices where the password will be changed and, if this user is a valid user on the device(s), then the new password will be set on the device.

  NOTE: SNMPv1 profiles can be set on device(s) using the Set Profile on Device feature of Console's Set Profile on Device feature of the Properties (Access) tab.

Show passwords in clear text
When this option is checked, passwords and community names appear as text. The default setting for this option is unchecked and passwords and community names appear as a string of asterisks.
Top


Related Information

For information on related windows:

For information on related task: For information on related task:

Top