R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Command Reference-6PW101

174
Default level
3: Manage level
Parameters
excluded: Denies access to any nodes in the specified MIB subtree.
included: Permits access to the nodes in the specified MIB subtree.
view-name: Specify a view name, which is a string of 1 to 32 characters.
oid-tree: Specifies a MIB subtree by its root node's OID, such as 1.4.5.3.1, or object name, such as
system. An OID is made up of a series of integers. It marks the position of a node in the MIB tree and
uniquely identifies a MIB object.
mask mask-value: Sets a MIB subtree mask, which is a hexadecimal string. Its length must be an even
number in the range of 2 to 32. For example, you can specify 0a, aa, but not 0aa. If no subtree mask is
specified, the MIB subtree mask is an all-F hexadecimal string. The MIB subtree and the subtree mask
together identify a set of objects to be included or excluded from the view.
Description
Use snmp-agent mib-view to create or update a MIB view.
Use undo snmp-agent mib-view to delete a MIB view.
By default, the system creates the ViewDefault view when the SNMP agent is enabled. In the default MIB
view, all MIB objects in the iso subtree but the snmpUsmMIB, snmpVacmMIB, and snmpModules.18
subtrees are accessible.
A MIB view represents a set of MIB objects (or MIB object hierarchies) with certain access privilege. The
MIB objects included in the MIB view are accessible while those excluded from the MIB view are
inaccessible.
Each view-name oid-tree pair represents a view record. If you specify the same record with different MIB
subtree masks multiple times, the last configuration takes effect.
The system can store entries for up to 20 unique MIB view records. Except the four subtrees in the default
MIB view, you can create up to 16 unique MIB view records. After you delete the default view with the
undo snmp-agent mib-view command, you can create up to 20 unique MIB view records.
Be cautious with deleting the default MIB view. The operation blocks access to any MIB object on the
device from NMSs that use the default view.
Related commands: snmp-agent community and snmp-agent group.
Examples
# Include the mib-2 (OID 1.3.6.1) subtree in the mibtest view, exclude the ip subtree from the mibtest view.
<Sysname> system-view
[Sysname] snmp-agent mib-view included mibtest 1.3.6.1
[Sysname] snmp-agent mib-view excluded mibtest ip
[Sysname] snmp-agent community read public mib-view mibtest
An SNMPv1 NMS in the public community can query the objects in the mib-2 subtree, but not any
objects (for example, the ipForwarding or ipDefaultTTL node) in the ip subtree.