Filter
Top Products
. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
B-25
Compaq Netelligent 2724/2824 Dual-Speed Hub User Guide
Writer:
Chris Seiter
Project:
Compaq Netelligent 2724/2824 Dual-Speed Hub User Guide
Comments:
299440-001
File Name:
2824_B.DOC
Last Saved On:
6/23/97 5:26 PM
Example 1
Suppose a user wanted all nodes on a specific IP or IPX segment to have SNMP
access. In this case, the address mask should have 1s in the network part of the
IP/IPX address and 0s in the node part of the address. The address match should
have the network number in the network part of the IP/IPX address and 0s in
the node part of the address.
Mask Match Result
255.255.255.0 143.162.103.0 All nodes on IP network
143.162.103 pass
FFFFFFFF:000000000000 01ABCDEF:000000000000 All nodes on IPX network
01ABCDEF pass
Example 2
Suppose a user wanted a specific node on a specific IP or IPX segment to have
SNMP access. In this case, the address mask should have 1s in both the network
part of the IP/IPX address and the node part of the address. The address match
should have the network number in the network part of the IP/IPX address and
the node address in the node part of the address.
Mask Match Result
255.255.255.255 143.162.103.73 Only IP address
143.162.103.73 passes
FFFFFFFF:FFFFFFFFFFFF 01ABCDEF:00805F39AE62 Only IPX address
01ABCDEF:00805F39AE62
passes
If an SNMP request passes the address mask/match check, the agent compares
the requestor’s community string with the authorized community string. If that
check passes, the agent compares the SNMP request with the node’s authorized
rights (see the Netelligent Unified MIB for a description of rights). If all checks
pass, the agent processes the SNMP request. Otherwise, the agent discards the
request and issues an authentication failure trap.