User manual

Configuration Commands 67
SNMPv3 View configuration
The following table describes the SNMPv3 View Configuration commands.
Table 64 SNMPv3 View Configuration commands
Command Description
snmp-server view <1-128>
name <1-32 characters>
Defines the name for a family of view subtrees up to a maximum of 32
characters.
Command mode: Global configuration
snmp-server view <1-128>
tree <1-32 characters>
Defines the Object Identifier (OID), a string of maximum 32 characters,
which when combined with the corresponding mask defines a family of
view subtrees.
An example of an OID is
1.3.6.1.2.1.1.1.0
Command mode: Global configuration
snmp-server view <1-128>
mask <1-32 characters>
Defines the bit mask, which in combination with the corresponding tree
defines a family of view subtrees. The mask can have a maximum of 32
characters.
Command mode: Global configuration
snmp-server view <1-128>
type {included|excluded}
Selects whether the corresponding instances of
vacmViewTreeFamilySubtree and
vacmViewTreeFamilyMask define a family of view subtrees, which is
included in or excluded from the MIB view.
Command mode: Global configuration
no snmp-server view <1-128>
Deletes the vacmViewTreeFamily group entry.
Command mode: Global configuration
show snmp-server view <1-
128>
Displays the current vacmViewTreeFamily configuration.
Command mode: All
View-based Access Control Model configuration
The view-based Access Control Model defines a set of services that an application can use for checking access
rights of the user. Access control is needed when the user has to process SNMP retrieval or modification request
from an SNMP entity.
The following table describes the User Access Control Configuration commands.
Table 65 View-based Access Control Configuration commands
Command Description
snmp-server access <1-32>
name <1-32 characters>
Defines the name of the group, up to a maximum of 32 characters.
Command mode: Global configuration
snmp-server access <1-32>
security {usm|snmpv1|snmpv2}
Allows you to select the security model to be used.
Command mode: Global configuration
snmp-server access <1-32>
level {noAuthNoPriv|authNo-
Priv|authPriv}
Defines the minimum level of security required to gain access rights. The
level
noAuthNoPriv means that the SNMP message will be sent
without authentication and without using a privacy protocol. The level
authNoPriv means that the SNMP message will be sent with
authentication but without using a privacy protocol. The
authPriv
means that the SNMP message will be sent both with authentication and
using a privacy protocol.
Command mode: Global configuration
snmp-server access <1-32>
read-view <1-32 characters>
Defines a 32 character long read view name that allows you read access to
a particular MIB view. If the value is empty or if there is no active MIB view
having this value then no access is granted.
Command mode: Global configuration
snmp-server access <1-32>
write-view <1-32 characters>
Defines a 32 character long write view name that allows you write access
to the MIB view. If the value is empty or if there is no active MIB view
having this value then no access is granted.
Command mode: Global configuration
snmp-server access <1-32
notify-view <1-32
characters>
Defines a 32 character long notify view name that allows you notify access
to the MIB view.
Command mode: Global configuration
no snmp-server access <1-32>
Deletes the View-based Access Control entry.
Command mode: Global configuration