Nortel Networks 8600 manual ERS-86065# config sys access-policy enable true

Technical Configuration Guide for SNMP v2.0 December 2006

Group Prefix Model Level ReadV WriteV NotifyV

-------------------------------------------------------------------------

initial	usm	noAuthNoPriv	root	root	root
initial	usm	authPriv	root	root	root
readgrp	snmpv1	noAuthNoPriv	v1v2only		org
readgrp	snmpv2c	noAuthNoPriv	v1v2only		org
v1v2grp	snmpv1	noAuthNoPriv	v1v2only	v1v2only	v1v2only
v1v2grp	snmpv2c	noAuthNoPriv	v1v2only	v1v2only	v1v2only
esegroup	usm	authPriv	org	org
sBladeGrp	snmpv1	noAuthNoPriv	sBladeView	sBladeView sBladeView
sBladeGrp	snmpv2c	noAuthNoPriv	sBladeView	sBladeView sBladeView

9 out of 9 Total entries displayed

-------------------------------------------------------------------------

The following example will add a new access policy that will allow SNMPv1/2 and telnet.

a)Enable access policies globally

•ERS-8606:5#config sys access-policy enable true

b)Assuming no access policies have been created, we can start with policy 2 and name the policy policy2.

•ERS-8606:5#config sys access-policy policy 2 create

•ERS-8606:5#config sys access-policy policy 2 name policy2

c)Add read/write/all access level to policy 2:

•ERS-8606:5#config sys access-policy policy 2 accesslevel rwa

d)Add the SNMPv1/2 group name and models to policy 2:

•ERS-8610:5#

•ERS-8610:5#

•ERS-8610:5#

•ERS-8610:5#

config sys access-policy policy snmp-group-add readgrp snmpv1 config sys access-policy policy 2 snmp-group-add readgrp snmpv2c config sys access-policy policy snmp-group-add v1v2grp snmpv1 config sys access-policy policy snmp-group-add v1v2grp snmpv2c

e)Enable telnet and SNMPv3 service:

•ERS-8610:5#config sys access-policy policy 2 service telnet enable

•ERS-8610:5#config sys access-policy policy 2 service snmpv3 enable

f)Enable policy 2:

•ERS-8610:5#config sys access-policy policy 2 enable

g)After the policy has been created, enter the following command to view policy 2:

•ERS-8606:5#show sys access-policy info policy2

AccessPolicyEnable: on

Id: 2

Name: policy2

PolicyEnable: true

Mode: allow

Service: telnetsnmpv3

Precedence: 10

NetAddrType: ipv4

NetAddr: 0.0.0.0

NetMask: 0.0.0.0

TrustedHostAddr: 47.133.58.69

______________________________________________________________________________________________________

NORTEL External Distribution 12