HP BMD00022 View-based Access Control Model configuration, Command /cfg/sys/ssnmp/snmpv3/access

Models: BMD00022

1 228
Download 228 pages 32.29 Kb
Page 123
Image 123

Table 88 SNMPv3 View Configuration Menu options

Command

Description

 

 

del

Deletes the vacmViewTreeFamily group entry.

 

 

cur

Displays the current vacmViewTreeFamily configuration.

 

 

View-based Access Control Model configuration

Command: /cfg/sys/ssnmp/snmpv3/access

[SNMPv3 vacmAccess 1 Menu]

name

- Set group name

model

- Set security model

level

- Set minimum level of security

rview

- Set read view index

wview

- Set write view index

nview

- Set notify view index

del

- Delete vacmAccess entry

cur

- Display current vacmAccess configuration

The view-based Access Control Model defines a set of services that an application can use for checking access rights of the user. Access control is needed when the user has to process SNMP retrieval or modification request from an SNMP entity.

The following table describes the User Access Control Configuration Menu options.

Table 89 View-based Access Control Configuration Menu options

Command

Description

 

 

name <1-32 characters>

Defines the name of the group, up to a maximum of 32 characters.

 

 

model usmsnmpv1snmpv2

Selects the security model to be used.

 

 

level

Defines the minimum level of security required to gain access rights. The level

noAuthNoPrivauthNoPriv

noAuthNoPriv means that the SNMP message will be sent without

authPriv

authentication and without using a privacy protocol. The level authNoPriv

 

 

means that the SNMP message will be sent with authentication but without

 

using a privacy protocol. The authPriv means that the SNMP message will

 

be sent both with authentication and using a privacy protocol.

 

 

rview <1-32 characters>

Defines a 32 character long read view name that allows you read access to

 

a particular MIB view. If the value is empty or if there is no active MIB view

 

having this value then no access is granted.

 

 

wview <1-32 characters>

Defines a 32 character long write view name that allows you write access to

 

the MIB view. If the value is empty or if there is no active MIB view having

 

this value then no access is granted.

 

 

nview <1-32 characters>

Defines a 32 character long notify view name that allows you notify access to

 

the MIB view.

 

 

del

Deletes the View-based Access Control entry.

 

 

cur

Displays the View-based Access Control configuration.

 

 

Configuration Menu 123

Page 123
Image 123
HP BMD00022 View-based Access Control Model configuration, Command /cfg/sys/ssnmp/snmpv3/access, Rview 1-32 characters