HP xw460c Blade manual SNMPv3 View Table information, SNMPv3 Access Table information

SNMPv3 View Table information

Command: /info/sys/snmpv3/view

View Name	Subtree	Mask	Type
------------------ ----------------------------		-------------	--------
iso	1		included
v1v2only	1		included
v1v2only	1.3.6.1.6.3.15		excluded
v1v2only	1.3.6.1.6.3.16		excluded
v1v2only	1.3.6.1.6.3.18		excluded

The user can control and restrict the access allowed to a group to only a subset of the management information in the management domain that the group can access within each context by specifying the group’s rights in terms of a particular MIB view for security reasons.

The following table describes the SNMPv3 View Table information.

Table 10 View Table parameters

Field	Description
View Name	Displays the name of the view.
Subtree	Displays the MIB subtree as an OID string. A view subtree is the set of all MIB object instances
	which have a common Object Identifier prefix to their names.
Mask	Displays the bit mask.
Type	Displays whether a family of view subtrees is included or excluded from the MIB view.

SNMPv3 Access Table information

Command: /info/sys/snmpv3/access

Group Name	Model	Level	Match	ReadV	WriteV	NotifyV
----------	-------	------------	------	---------	--------	-------
v1v2grp	snmpv1	noAuthNoPriv	exact	iso	iso	v1v2only
admingrp	usm	authPriv	exact	iso	iso	iso

The access control sub system provides authorization services.

The vacmAccessTable maps a group name, security information, a context, and a message type, which could be the read or write type of operation or notification into a MIB view.

The View-based Access Control Model defines a set of services that an application can use for checking access rights of a group. This group’s access rights are determined by a read-view, a write-view, and a notify-view. The read-view represents the set of object instances authorized for the group while reading the objects. The write-view represents the set of object instances authorized for the group when writing objects. The notify-view represents the set of object instances authorized for the group when sending a notification.

Information Menu 25