Management and Configuration Guide K/KA/KB.15.15

Table 18 Predefined group access levels (continued)
Group write viewGroup read viewGroup access typeGroup name
ManagerWriteViewManagerReadViewVer2c or Ver1commanagerrw
DiscoveryViewManagerReadViewVer2c or Ver1commanagerr
OperatorReadViewOperatorReadViewVer2c or Ver1comoperatorrw
DiscoveryViewOperatorReadViewVer2c or Ver1comoperatorr
Each view allows you to view or modify a different set of MIBs:
• Manager Read View – access to all managed objects
• Manager Write View – access to all managed objects except the following:
vacmContextTable•
• vacmAccessTable
• vacmViewTreeFamilyTable
• OperatorReadView – no access to the following:
icfSecurityMIB•
• hpSwitchIpTftpMode
• vacmContextTable
• vacmAccessTable
• vacmViewTreeFamilyTable
• usmUserTable
• snmpCommunityTable
• Discovery View – Access limited to samplingProbe MIB.
NOTE: All access groups and views are predefined on the switch. There is no method to modify
or add groups or views to those that are predefined on the switch.
SNMPv3 communities
SNMP commuities are supported by the switch to allow management applications that use version
2c or version 1 to access the switch. The communities are mapped to Group Access Levels that
are used for version 2c or version 1 support. This mapping happens automatically based on the
communities access privileges, but special mappings can be added with the snmpv3 community
command.
SNMP community features
Use SNMP communities to restrict access to the switch by SNMP management stations by adding,
editing, or deleting SNMP communities. You can configure up to five SNMP communities, each
with either an operator-level or a manager-level view and either restricted or unrestricted write
access.
Using SNMP requires that the switch have an IP address and subnet mask compatible with your
network.
CAUTION: For PCM/PCM+ version 1.5 or earlier (or any TopTools version), deleting the "public"
community disables some network management functions (such as traffic monitoring, SNMP trap
generation, and threshold setting.) If network management security is a concern, and if you are
using the above software versions, HP recommends that you change the write access for the "public"
community to "Restricted."
244 Configuring for Network Management Applications