Specifications

snmp-server group
MP-811
Cisco IOS Multiprotocol Label Switching Command Reference
January 2010
No default values exist for authentication or privacy algorithms when you configure the snmp-server
group command. Also, no default passwords exist. For information about specifying a Message Digest
5 (MD5) password, see the documentation of the snmp-server user command.
Configuring Notify Views
The notify-view option is available for two reasons:
• If a group has a notify view that is set using SNMP, you may need to change the notify view.
• The snmp-server host command may have been configured before the snmp-server group
command. In this case, you must either reconfigure the snmp-server host command, or specify the
appropriate notify view.
Specifying a notify view when configuring an SNMP group is not recommended, for the following
re
asons:
• The snmp-server host command autogenerates a notify view for the user, and then adds it to the
group associated with that user.
• Modifying the group’s notify view will affect all users associated with that group.
Instead of specifying the notify view for a group as part of the s
nmp-server group command, use the
following commands in the order specified:
1. snmp-server user—Configures an SNMP user.
2. snmp-server group—Configures an SNMP group, without adding a notify view.
3. snmp-server host—Autogenerates the notify view by specifying the recipient of a trap operation.
SNMP Contexts
SNMP contexts provide VPN users with a secure way of accessing MIB data. When a VPN is associated
with a context, that VPN’s specific MIB data exists in that context. Associating a VPN with a context
enables service providers to manage networks with multiple VPNs. Creating and associating a context
with a VPN enables a provider to prevent the users of one VPN from accessing information about users
of other VPNs on the same networking device.
Use this command with the co
ntext context-name keyword and argument to associate a read, write, or
notify SNMP view with an SNMP context.
Examples
Create an SNMP Group
The following example shows how to create the SNMP server group “public,” allowing read-only access
for all objects to members of the standard named access list “lmnop”:
Router(config)# snmp-server group public v2c access lmnop
Remove an SNMP Server Group
The following example shows how to remove the SNMP server group “public” from the configuration:
Router(config)# no snmp-server group public v2c
Associate an SNMP Server Group with Specified Views
The following example shows SNMP context “A” associated with the views in SNMPv2c group
“GROUP1”:
Router(config)# snmp-server context A
Router(config)# snmp mib community commA
Router(config)# snmp mib community-map commA context A target-li
st commAVpn
Router(config)# snmp-server group GROUP1 v2c context A read view
A write viewA notify viewB