Nortel Networks 40M2420 Cfg/sys/ssnmp/snmpv3/access, Model usmsnmpv1snmpv2, Match exactprefix

Alteon OS Command Reference

/cfg/sys/ssnmp/snmpv3/access

View-based Access Control Model Configuration

The view-based Access Control Model defines a set of services that an application can use for checking access rights of the user. Access control is needed when the user has to process SNMP retrieval or modification request from an SNMP entity.

[SNMPv3 vacmAccess 1 Menu]

name	- Set group name
prefix	- Set content prefix
model	- Set security model
level	- Set minimum level of security
match	- Set prefix only or exact match
rview	- Set read view index
wview	- Set write view index
nview	- Set notify view index
del	- Delete vacmAccess entry
cur	- Display current vacmAccess configuration

Table 6-13View-based Access Control Model Menu Options (/cfg/sys/ssnmp/ snmpv3/access)

Command Syntax and Usage

name <32 character name>

Defines the name of the group.

prefix <32 character name>

Defines the name of the context. An SNMP context is a collection of management information that an SNMP entity can access. An SNMP entity has access to many contexts. For more information on naming the management information, see RFC2571, the SNMP Architecture document. The view-based Access Control Model defines a table that lists the locally available contexts by con- textName.

model usmsnmpv1snmpv2

Allows you to select the security model to be used.

level noAuthNoPrivauthNoPrivauthPriv

Defines the minimum level of security required to gain access rights. The level noAuthNoPriv means that the SNMP message will be sent without authentication and without using a privacy pro- tocol. The level authNoPriv means that the SNMP message will be sent with authentication but without using a privacy protocol. The authPriv means that the SNMP message will be sent both with authentication and using a privacy protocol.

match exactprefix

If the value is set to exact, then all the rows whose contextName exactly matches the prefix are selected. If the value is set to prefix then the all the rows where the starting octets of the con- textName exactly match the prefix are selected.

194 „ Chapter 6: The Configuration Menu 40M2420, April 2007