Chapter 10

SpeedTouch™ Monitoring

10.2.10 How to Add an SNMP User

About SNMP Users SNMP Users allow you to determine which MIBs a specific user is allowed to view or change. This is done by adding a user to a user group. This user group determines the user’s access to the MIBs.

Limiting MIB Access You can limit the MIBs visible within a defined Read-Only (RO) or Read/Write (RW) Community. To do so, you need to do the following:

Define the view with the MIBs you want visible

Define a group to determine the read/write/notify access

Define a user and add the user to the group, giving that user access to that view

Users and Communities The use of Users, Views and Groups is defined in SNMPv3. SNMP v1 and SNMPv2

however, use communities. In SNMPv1, “users” are represented as communities. Therefore, they are not visible with the :snmp user list command. However, you can still view them using the :snmp securitytogroup list command.

SNMP User Groups There are 7 pre-defined user groups available for SNMP. These levels exist in the MLP structure. However, since SNMP does not need this many groups, some of them have the same default access rights. Below is an overview:

Group

User

Description

This group has read access to the following subtrees:

1.3.6.1.2.1.1System

1.3.6.1.2.1.11SNMP

1.3.6.1.6.3.10.2.1 SNMP Engine 1.3.6.1.6.3.11.2.1 SNMP MD Stats 1.3.6.1.6.3.15.1.1 Stats

This group has no CLI access.

152

E-DOC-CTC-20051017-0155 v1.0

 

Page 162
Image 162
Technicolor - Thomson SpeedTouchTM620 manual How to Add an Snmp User, Group