Extreme Management Center applications access devices in order to control certain device functions and retrieve information for device properties views, FlexViews and periodic polling. This tab lets you create the authentication credentials used to manage access to your devices through SNMP and CLI (command line interface), and the profiles that use those credentials for various access levels.
- Credentials - Credentials define the authentication values (for
example, user names and passwords) that will be used to access your network
devices.
- SNMP Credentials provide support for device management using SNMP.
- CLI Credentials provide support for device management using the command line interface (CLI).
- Profiles - Profiles are assigned to device models in the Management Center database. They identify the credentials that are used for the various access levels when communicating with the device.
Managing device access using credentials and profiles consists of creating your credentials, creating the profiles that uses those credentials, and then mapping the profiles to specific devices in the Profile/Device Mapping tab.
Click areas in the window for more information.
- Default Access Profiles Table
- This table lists all of the profiles created. The public_v1_Profile is automatically created during Console installation and cannot be deleted.
- Version
- This is the SNMP protocol version for the profile. Profiles can be configured for SNMPv1, SNMPv2c, or as SNMPv3.
- Read, Write, Max Access Credential
- When the Version is SNMPv1 or SNMPv2c, the Read, Write, and Max Access columns in the table contain the Community Name for each access level. When the Version is SNMPv3, the Read, Write, and Max Access columns in the table contain the credential specified for each access level.
- Read, Write, Max Access Security Level
- When the Version is SNMPv1 or SNMPv2c, these columns do not apply. When the Version is SNMPv3, these columns contain the security level specified for each access credential.
- Add Profile Button
- Opens the Add Profile window where you can select the SNMP version and define the profile name and passwords/community names used by the profile.
- Edit (Profile) Button
- Opens the Edit Profile window where you can modify the SNMP version and passwords/community names used by a selected profile.
- SNMP Credentials Subtab
- This tab lists all of the SNMP credentials that have been created in the Management Center database. The public_v1 credential is automatically created during
Management Center installation and cannot be deleted.
- Name
- This column lists names assigned to credentials that have been created in the Management Center database.
- Version
- This is the SNMP protocol version for the credential. Credentials can be configured for SNMPv1, SNMPv2c, or as SNMPv3.
- Community
- For SNMPv1 or SNMPv2c credentials, this is the Community Name used for device access.
- User Name
- For SNMPv3 credentials, this is the User Name used for device access.
- Auth Type/Auth Password, Priv Type/Priv Password
- For SNMPv3 credentials, these columns show the authentication protocol (None, MD5, or SHA) and privacy protocol (None or DES) and passwords used by the credential.
- Show passwords in clear text
- When this option is checked, passwords and community names appear as text. The default setting for this option is unchecked, and passwords and community names appear as a string of asterisks.
- Add Credential Button
- Opens the Add Credential window where you can define new SNMP credentials.
- Edit (Credential) Button
- Opens the Edit Credential window where you can modify a credential selected from the SNMP Credentials table.
- CLI Credentials Subtab
- This tab lists all of the CLI credentials that have been created in the Management Center database. The
Default and <No Access> credentials are created automatically during Management Center installation and cannot be deleted.
- Add (CLI Credential) Button
- Opens the Add Credential window where you can define a new CLI credential.
- Edit (CLI Credential) Button
- Opens the Edit Credential window where you can modify a CLI credential selected from the CLI Credentials table.
Add/Edit Profile Window
This window lets you define the SNMP and CLI Credentials for a new profile or modify the credentials for an existing profile.
| NOTE: | When configuring profiles for ExtremeWireless Controllers, you must make
sure that controllers are discovered using an SNMPv2c or SNMPv3 profile. This profile
must also contain SSH CLI credentials for the controller. Wireless Manager uses
the controller's CLI to retrieve required information and to configure
managed controllers. |
|---|
Click areas in the windows for more information.
- Profile Name
- A unique name (up to 32 characters) that you assign to this profile.
When editing an existing profile, you can select a profile from the table to modify its settings. However, you cannot change the name of an existing profile.
- SNMP Version
- This is the SNMP protocol version for the profile. Profiles can be configured for SNMPv1, SNMPv2c, or as SNMPv3. When either SNMPv1 or SNMPv2c is selected, the editor provides fields where you can configure access levels using Community Names. With SNMPv3 selected, you can configure access levels using Credentials and Security Levels.
- Read, Write, Max Access
- SNMPv1, SNMPv2c
- The Read, Write, Max Access define the community names used for these levels of access.
- Read - This Community Name is used for get operations.
- Write - This Community Name is used for set operations.
- Max Access - This Community Name is used for set operations that require administrative access, such as changing community names.
- SNMPv3
- The Read, Write, Max Access levels are defined by Credentials and Security Level:
- Credentials
- Credential Names are assigned to each of the three SNMPv3 access levels that are used for the Read, Write and Max Access operations.
- Read - used for read operations (gets).
- Write - used for write operations (sets).
- Max Access - used for write operations (set ) that require administrative access.
- CLI Credential
- Use the drop-down list to select the CLI Credential for this profile. CLI credentials provide support for device management using the command line interface (CLI).
Add/Edit SNMP Credential Window
This window lets you define or edit the names and community names/passwords for SNMP credentials.
Click areas in the window for more information.
- Credential Name
- A unique name (up to 32 characters) that you assign to this access credential. You can define a new credential or select a name from the table to modify settings for an existing credential. You cannot edit the name of an existing credential.
- SNMP Version
- This is the SNMP protocol version for the credential. Credentials can be configured for SNMPv1, SNMPv2, or as SNMPv3. When either SNMPv1 or SNMPv2 is selected, the window provides fields where you can configure access levels using Community Names. With SNMPv3 selected, you can configure access levels using Authentication and Privacy Types.
- Community Name
- For SNMPv1 or SNMPv2c credentials, this is the Community Name used for device access.
- Authentication Type
- For SNMPv3 credentials, select MD5, SHA1, or None, from this drop-down list .
- Specify/Confirm Password
- This is the password (between 1 and 64 characters in length) that will be used to determine Authentication. These fields are disabled for Authentication Type, None. If an existing password is changed and the credential is currently used with a profile that is applied to one or more devices, a confirmation dialog is opened to determine how the changes will be handled. You will be asked if you want to change the password on the device(s). You can then select the devices where the password will be changed and, if this user is a valid user on the device(s), then the new password will be set on the device.
- Privacy Type
- For SNMPv3 credentials, select DES or None from this drop-down list. These settings are disabled if Authentication Type None is selected.
- Specify/Confirm Password
- This is the password (between 1 and 64 characters in length) that will be used to determine Privacy. These fields are disabled for Privacy Type, None. If an existing password is changed and the credential is currently used with a profile that is applied to one or more devices, a confirmation dialog is opened to determine how the changes will be handled. You will be asked if you want to change the password on the device(s). You can then select the devices where the password will be changed and, if this user is a valid user on the device(s), then the new password will be set on the device.
- Show passwords in clear text
- When this option is checked, passwords and community names appear as text. The default setting for this option is unchecked and passwords and community names appear as a string of asterisks.
Add/Edit CLI Credential Window
This window lets you define or edit the user name and passwords for a CLI credential.
Click areas in the window for more information.
- Passwords
- The passwords used to determine different levels of access to the device:
- Login - The password required to start a CLI session.
- Enable - The password for entering Enable mode.
- Configuration - The password for entering Configure mode.
| NOTE: | When configuring CLI Credentials for ExtremeWireless Wireless Controllers, you must
add the username and password Login credentials for the controller to this Add/Edit
Credential window in order for Wireless Manager to properly
connect (SSH) to the controller and read device configuration data. However, the
Login password must be added to the Configuration password field instead of the
Login password field. The username
and Configuration password specified here must match the username and Login password configured on the controller. |
|---|
- Show passwords in clear text
- When this option is checked, passwords appear as text. The default setting for this option is unchecked and passwords appear as a string of asterisks.
For information on related windows:
For information on related tasks:
- How to Manage SNMP Passwords
- How to Configure Profiles and Credentials
- How to Configure Profile/Device Mapping
- How to Manage Users and Groups
