Defining Device Access Privileges

To manage wireless network components—including access points, switches, and routers—a Server must have the correct authorization. These authorizations are called device access privileges. The type of authorization required varies, depending on which protocol the Server uses to configure the component. The types of authorizations are as follows:

SNMP Read-Only community name
SNMP Read/Write community name
Telnet password
HTTP user name and password
SNMPv3 user name

The authorization required varies depending on the type of hardware being queried by the infrastructure device. Frequently, a component requires more than one authorization type—for example, a Server might need both an HTTP user name and an SNMP Read/Write name to correctly configure an infrastructure device. The following table lists the authorization required for each hardware type:

Hardware

Authorization

Switches

SNMP Read-Only community name

Cisco-Aironet 350/1200 Series Access Point

SNMP Read/Write community name

HTTP user name and password

Cisco-Aironet (IOS)

SNMP Read/Write community name

HTTP user name and password

Telnet community name and password

Telnet Enable password

Symbol Access Point

SNMP Read/Write community name

SNMP Read-Only community name

HTTP user name and password

Symbol Wireless Switch

SNMP Read/Write community name

SNMP Read-Only community name

Telnet password

Proxim Access Point

SNMP Read-Only community name

SNMP Read/Write community name

Dell Access Point

SNMP Read-Only community name

SNMP Read/Write community name

Note:   Do not disable the Web interface to Cisco-Aironet access points. Doing so prevents the server from managing the access points.

If you find that a server is unable to query an infrastructure device, it is recommended that you first look at whether the server has the proper authorization information for that device.

The server supports multiple authorizations for each protocol type. For example, networks frequently have multiple SNMP Read/Write community names. In this situation, when you define device access privileges for the server, you can create a list of SNMP Read/Write community names. When the server attempts to query an infrastructure device, it moves through the list of SNMP Read/Write community names until it finds one the device will accept. If all attempts to communicate with a device fail, the server will generate an alert.

After configuring this information, send it to the servers. For more information on synchronizing information, see Performing a Server Synchronization.

See the following sections for details on access privileges:

Defining Access Privileges
Configuring SNMP V3 Settings
Cisco IOS Access Privileges
Replacing Insecure Protocols and Default Passwords

 

© 2012 Wavelink Corporation. All Rights Reserved.