View-based Access Control Model configuration

Command: /cfg/sys/ssnmp/snmpv3/access[SNMPv3 vacmAccess 1 Menu]

name

- Set group name
model- Set security model
level- Set minimum level of security
rview- Set read view index
wview- Set write view index
nview- Set notify view index

del

- Delete vacmAccess entry

cur

- Display current vacmAccess configuration

The view-based Access Control Model defines a set of services that an application can use for checking access rights of the user. Access control is needed when the user has to process SNMP retrieval or modification request from an SNMP entity.

The following table describes the User Access Control Configuration Menu options.

Table 88 View-based Access Control Configuration Menu options

Command

Description

 

 

name <1-32

Defines the name of the group, up to a maximum of 32 characters.

characters>

 

 

 

model

Selects the security model to be used.
usmsnmpv1snmpv2

 

 

 

level

Defines the minimum level of security required to gain access rights. The level
noAuthNoPrivauthNo

noAuthNoPriv means that the SNMP message will be sent without authentication and

PrivauthPriv

without using a privacy protocol. The level authNoPriv means that the SNMP message

 

will be sent with authentication but without using a privacy protocol. The authPriv means

 

that the SNMP message will be sent both with authentication and using a privacy protocol.

 

 

rview <1-32

Defines a 32 character long read view name that allows you read access to a particular MIB

characters>

view. If the value is empty or if there is no active MIB view having this value then no access is

 

granted.

 

 

wview <1-32

Defines a 32 character long write view name that allows you write access to the MIB view. If

characters>

the value is empty or if there is no active MIB view having this value then no access is

 

granted.

 

 

nview <1-32

Defines a 32 character long notify view name that allows you notify access to the MIB view.

characters>

 

 

 

del

Deletes the View-based Access Control entry.

 

 

cur

Displays the View-based Access Control configuration.

 

 

SNMPv3 Group configuration

Command: /cfg/sys/ssnmp/snmpv3/group[SNMPv3 vacmSecurityToGroup 1 Menu]

model

- Set security model

uname- Set USM user name
gname

- Set group name

del

-

Delete vacmSecurityToGroup entry

cur

-

Display current vacmSecurityToGroup configuration

Configuration Menu 100