HP MSR2000/3000/4000 Router Series Network Management and Monitoring Command Reference

144
Parameters
v1: Specifies SNMPv1.
v2c: Specifies SNMPv2c.
v3: Specifies SNMPv3.
group-name: Specifies an SNMP group name, a string of 1 to 32 case-sensitive characters.
authentication: Specifies the authentication without privacy security model for the SNMPv3 group.
privacy: Specifies the authentication with privacy security model for the SNMPv3 group.
read-view view-name: Specifies a read-only MIB view. The view-name represents a MIB view name, a
string of 1 to 32 characters. If no read-only MIB view is specified, the SNMP group has read access to
the default view ViewDefault.
write-view view-name: Specifies a read and write MIB view. The view-name represents a MIB view name,
a string of 1 to 32 characters. If no read and write view is specified, the SNMP group cannot set any MIB
object on the SNMP agent.
notify-view view-name: Specifies a notify MIB view. The view-name represents a MIB view name, a string
of 1 to 32 characters. The SNMP agent sends notifications to the users in the specified group only for the
MIB objects included in the notify view. If no notify view is specified, the SNMP agent does not send any
notification to the users in the specified group.
acl acl-number: Specifies a basic IPv4 ACL to filter NMSs by source IPv4 address. The acl-number
argument represents an ACL number in the range of 2000 to 2999. In the specified SNMP group, only
NMSs with an IPv4 address permitted in the ACL can access the SNMP agent. If no ACL is specified, the
specified ACL does not exist, or the specified ACL does not have any rules, all NMSs in the SNMP group
can access the SNMP agent.
acl ipv6 ipv6-acl-number: Specifies a basic IPv6 ACL to filter NMSs by source IPv6 address. The
ipv6-acl-number argument represents an ACL number in the range of 2000 to 2999. In the specified
SNMP group, only NMSs with an IPv6 address permitted in the IPv6 ACL can access the SNMP agent.
If no ACL is specified, the specified ACL does not exist, or the specified ACL does not have any rules, all
NMSs in the SNMP group can access the SNMP agent.
Usage guidelines
SNMPv1 and SNMPv2c settings in this command are supported only in non-FIPS mode.
All users in an SNMP group share the security model and access rights of the group.
You can create up to 20 SNMP groups, including SNMPv1, SNMPv2c, and SNMPv3 groups.
All SNMPv3 users in a group share the same security model, but can use different authentication and
privacy key settings. To implement a security model for a user and avoid SNMP communication failures,
make sure the security model configuration for the group and the security key settings for the user are
compliant with Table 32 and matc
h the settings on the NMS.
Table 32 Basic security setting requirements for different security models
Security model
Security model
ke
y
word for the
g
rou
p
Security key settings
for the user
Remarks
Authentication with
privacy
privacy
Authentication key,
privacy key
If the authentication key or
the privacy key is not
configured, SNMP
communication will fail.