Configuring Groups And Users; Deleting Elements Of The Snmp Configuration; Listing Snmp Configuration Information - HP StoreAll 9730 Administrator's Manual

Configuring groups and users

A group defines the access control policy on managed objects for one or more users. All users
must belong to a group. Groups and users exist only in SNMPv3. Groups are assigned a security
level, which enforces use of authentication and privacy, and specific read and write views to
identify which managed objects group members can read and write.
The command to create a group assigns its SNMPv3 security level, read and write views, and
context name. A context is a collection of managed objects that can be accessed by an SNMP
entity. A related option, -m, determines how the context is matched. The format follows:
ibrix_snmpgroup -c -g GROUPNAME [-s {noAuthNoPriv|authNoPriv|authPriv}]
[-r READVIEW] [-w WRITEVIEW]
For example, to create the group group2 to require authorization, no encryption, and read access
to the hp view, enter:
ibrix_snmpgroup -c -g group2 -s authNoPriv -r hp
The format to create a user and add that user to a group follows:
ibrix_snmpuser -c -n USERNAME -g GROUPNAME [-j {MD5|SHA}]
[-k AUTHORIZATION_PASSWORD] [-y {DES|AES}] [-z PRIVACY_PASSWORD]
Authentication and privacy settings are optional. An authentication password is required if the
group has a security level of either authNoPriv or authPriv. The privacy password is required if the
group has a security level of authPriv. If unspecified, MD5 is used as the authentication algorithm
and DES as the privacy algorithm, with no passwords assigned.
For example, to create user3, add that user to group2, and specify an authorization password
for authorization and no encryption, enter:
ibrix_snmpuser -c -n user3 -g group2 -k auth-passwd -s authNoPriv

Deleting elements of the SNMP configuration

All SNMP commands use the same syntax for delete operations, using -d to indicate the object is
to delete. The following command deletes a list of hosts that were trapsinks:
ibrix_snmptrap -d -h lab15-12.domain.com,lab15-13.domain.com,lab15-14.domain.com
There are two restrictions on SNMP object deletions:
A view cannot be deleted if it is referenced by a group.
A group cannot be deleted if it is referenced by a user.

Listing SNMP configuration information

All SNMP commands employ the same syntax for list operations, using the -l flag. For example:
ibrix_snmpgroup -l
This command lists the defined group settings for all SNMP groups. Specifying an optional group
name lists the defined settings for that group only.
Setting up SNMP notifications 75