Citrix Systems Network Router NETSCALER 9.3 User Manual download pdf (Page 64)

• Data integrity: To protect messages from being modified during transmission

through the network.

• Data origin verification: To authenticate the user who sent the message request.

• Message timeliness: To protect against message delays or replays.

• Data confidentiality: To protect the content of messages from being disclosed to

unauthorized entities or individuals.

w View-Based Access Control Model. The view-based access control model (VACM)

enables you to configure access rights to a specific subtree of the MIB based on

various parameters, such as security level, security model, user name, and view

type. It enables you to configure agents to provide different levels of access to the

MIB to different managers.

The Citrix NetScaler supports the following entities that enable you to implement the

security features of SNMPv3:

w SNMP Engines

w SNMP Views

w SNMP Groups

w SNMP Users

These entities function together to implement the SNMPv3 security features. Views are

created to allow access to subtrees of the MIB. Then, groups are created with the

required security level and access to the defined views. Finally, users are created and

assigned to the groups.

Note: The view, group, and user configuration are synchronized and propagated to

the secondary node in a high availability (HA) pair. However, the engine ID is neither

propagated nor synchronized as it is unique to each NetScaler appliance.

To implement message authentication and access control, you need to:

w Set the Engine ID

w Configure Views

w Configure Groups

w Configure Users

Setting the Engine ID

SNMP engines are service providers that reside in the SNMP agent. They provide

services such as sending, receiving, and authenticating messages. SNMP engines are

uniquely identified using engine IDs.

The NetScaler has a unique engineID based on the MAC address of one of its interfaces.

It is not necessary to override the engineID. However, if you want to change the engine

ID, you can reset it.

Chapter 2 SNMP

1 2 ... 59 60 61 62 63 64 65 66 67 68 69 ... 194 195

No comments

Citrix Systems Network Router NETSCALER 9.3 User Manual Page 64