Alcatel-Lucent 7705 SAR-8 System Management Manual page 181

Service aggregation router os
Table of Contents

Advertisement

Default
No views are defined
Parameters
view-name — the 1 to 32 character view name
oid-value — the object identifier (OID) value for the view-name. This value, for example,
mask
Syntax
mask mask-value [type {included | excluded}]
no mask
Context
config>system>security>snmp>view view-name
Description
The mask value and the mask type, along with the oid-value configured in the view command,
determines the access of each sub-identifier of an object identifier (MIB subtree) in the view.
Each bit in the mask corresponds to a sub-identifier position; for example, the most significant bit for
the first sub-identifier, the next most significant bit for the second sub-identifier, and so on. If the bit
position on the sub-identifier is available, it can be included or excluded.
For example, the MIB subtree that represents MIB-II is 1.3.6.1.2.1. The mask that catches all
MIB-II is 0xfc or 0b11111100.
Only a single mask may be configured per view and OID value combination. If more than one entry is
configured, each subsequent entry overwrites the previous entry.
Per RFC 2575, View-based Access Control Model (VACM) for the Simple Network Management
Protocol (SNMP), each MIB view is defined by two sets of view subtrees, the included view subtrees,
and the excluded view subtrees. Every view subtree, both the included and the excluded ones, are
defined in this table. To determine if a particular object instance is in a particular MIB view, compare
the object instance's object identifier (OID) with each of the MIB view's active entries in this table. If
none match, then the object instance is not in the MIB view. If one or more match, then the object
instance is included in, or excluded from, the MIB view according to the value of
vacmViewTreeFamilyType in the entry whose value of vacmViewTreeFamilySubtree has the most
sub-identifiers.
The no form of this command removes the mask from the configuration.
Default
no mask
7705 SAR OS System Management Guide
Default
none
1.3.6.1.6.3.11.2.1, combined with the mask and include and exclude statements, configures the
access available in the view.
It is possible to have a view with different subtrees with their own masks and include and exclude
statements. This allows you to customize visibility and write capabilities for specific user
requirements.
SNMP
Page 181

Advertisement

Table of Contents
loading

This manual is also suitable for:

7705 sar-f7705

Table of Contents