Monitoring and Controlling the Machine with SNMP

Simple Network Management Protocol (SNMP) is a protocol for monitoring and controlling communication devices in a network by using Management Information Base (MIB). The machine supports SNMPv1 and security-enhanced SNMPv3. You can check the status of the machine from a computer when you print documents or use the Remote UI. You can enable either SNMPv1 or SNMPv3, or both at the same time. Specify the settings for each version to suit your network environment and the purpose of use.
SNMPv1
SNMPv1 uses information called "community" to define the scope of SNMP communication. Because this information is exposed to the network in plain text, your network will be vulnerable to attacks. If you want to ensure network security, disable SNMPv1 and use SNMPv3.
SNMPv3
With SNMPv3, you can implement network device management that is protected by robust security features. Note that TLS must be enabled for the Remote UI before configuring SNMPv3 (Configuring the Key and Certificate for TLS).
The machine does not support the trap notification feature of SNMP.
To change the port number of SNMP, see Changing Port Numbers.
SNMP management software, when installed on a computer on the network, enables you to configure, monitor, and control the machine remotely from the computer. For more information, see the instruction manuals for your management software.
For more information about the basic operations to be performed when setting the machine from the Remote UI, see Setting Up Menu Options from Remote UI.
1
Start the Remote UI and log in to System Manager mode. Starting Remote UI
2
Click [Settings/Registration] on the Portal page. Remote UI Screen
3
Select [Network Settings]  [SNMP Settings].
4
Click [Edit].
5
Specify SNMPv1 settings.
If you do not need to change SNMPv1 settings, proceed to the next step.
[Use SNMPv1]
Select the check box to enable SNMPv1. You can specify the rest of SNMPv1 settings only when this check box is selected.
[Use Community Name 1]/[Use Community Name 2]
Select the check box to specify a community name. If you do not need to specify a community name, clear the check box.
[Community Name]
Enter alphanumeric characters for the name of the community.
[MIB Access Permission]
For each community, select [Read/Write] or [Read Only] for the access privileges to MIB objects.
[Read/Write]
Permits both viewing and changing the values of MIB objects.
[Read Only]
Permits only viewing the values of MIB objects.
[Use Dedicated Community]
Dedicated Community is a preset community, intended exclusively for Administrators using Canon software, such as imageWARE Enterprise Management Console (iW Management Console). Select the check box to use Dedicated Community, and specify [MIB Access Permission]. If you do not need to use Dedicated Community, clear the check box.
6
Specify SNMPv3 settings.
If you do not need to change SNMPv3 settings, proceed to the next step.
[Use SNMPv3]
Select the check box to enable SNMPv3. You can specify the rest of SNMPv3 settings only when this check box is selected.
[Enable User]
Select the check box to enable [User Settings 1]/[User Settings 2]/[User Settings 3]. To disable user settings, clear the corresponding check box.
[User Name]
Enter alphanumeric characters for the user name.
[MIB Access Permission]
Select [Read/Write] or [Read Only] for the access privileges to MIB objects.
[Read/Write]
Permits both viewing and changing the values of MIB objects.
[Read Only]
Permits only viewing the values of MIB objects.
[Security Settings]
Select [Authentication On/Encryption On], [Authentication On/Encryption Off], or [Authentication Off/Encryption Off] for the desired combination of authentication and encryption settings.
[Authentication Algorithm]
Click the [Authentication On/Encryption On] or [Authentication On/Encryption Off] for [Security Settings] for the algorithm that corresponds to your environment.
[Encryption Algorithm]
Click the [Authentication On/Encryption On] for [Security Settings] for the algorithm that corresponds to your environment.
[Set/Change Password]
To set or change the password, select the check box and enter alphanumeric characters for the password in the [Authentication Password] or [Encryption Password] text box. For confirmation, enter the same password in the [Confirm] text box. Passwords can be set independently for authentication and encryption algorithms.
7
Specify Printer Management Information Acquisition Settings.
With SNMP, the printer management information, such as printing protocols and printer ports, can be monitored and obtained regularly from a computer on the network.
[Acquire Printer Management Information from Host]
Select the check box to enable monitoring of the printer management information of the machine via SNMP. To disable monitoring of the printer management information, clear the check box.
8
Click [OK].
9
Restart the machine.
Turn OFF the machine, wait for at least 10 seconds, and turn it back ON.
Disabling SNMPv1
If SNMPv1 is disabled, some of the functions of the machine become unavailable, such as obtaining machine information via the printer driver.
Using the operation panel
You can enable or disable the SNMP settings from <Menu> in the Home screen. <SNMP Settings>
Enabling Both SNMPv1 and SNMPv3
If both versions of SNMP are enabled, it is recommended that MIB access permission in SNMPv1 be set to [Read Only]. MIB access permission can be set independently in SNMPv1 and SNMPv3 (and for each user in SNMPv3). Selecting [Read/Write] (full access permission) in SNMPv1 negates the robust security features that characterize SNMPv3 because most of the machine settings can then be controlled with SNMPv1.
2579-017