Defining Groups And Access Rights - Net Insight Nimbra One User Manual

vacmViewTreeFamilyEntry if9 1.3.6.1.2.1.2.2.1.0.9 ff:bf included
nonVolatile
vacmAccessEntry name prefix model level match read write notify
storageType
vacmAccessEntry FullAccessUser - usm authNoPriv exact All All All
onVolatile
70 • Control Network
©2006 Net Insight AB, All rights reserved
padded mask
mask in hexadecimal
mask as value

Defining Groups and Access Rights

A group is a associating the MIB views with access rights. A group is
represented by one or multiple entries, for different accesses. An entry is
represented by the tag vacmGroupName .
name is the name of the group. The name is a string of up to 32 characters. The
is used when associating access rights to users (see Assigning Users).
prefix is the name of the context to which the group is part of. To gain access by
this entry, the specified context must be in use. On the Nimbra network
elements, the context is always the default context, which is represented by a
dash ( - ). (The prefix could be the complete name of the context, or the prefix of
a context, as defined by match, see below.)
model is the security model to which the group belongs. In order to gain access
by this entry, the specified security model must be in use. The security model
can be snmpv1 , snmpv2c or usm for SNMPv3 using the USM.
level is the minimal security level. In order to gain access by this entry, the
security level in use must at least be the specified security level. The value is
noAuthNoPriv if no authentication shall be required, and authNoPriv if
authentication using HMAC-MD5 is required. If multiple entries are equally
indexed, except for this value, then the one with the highest security level is
applied.
match specifies how the prefix shall be matched. For the Nimbra network
elements, it does not make sense to set the value to anything except exact .
The value can be exact of prefix .
read is the name of the MIB view (see Defining MIB Views) that shall be used
to control what management information can be read. In order to gain read
access by this entry, the MIB view must allow access of the management
information.
write is the name of the MIB view (see Defining MIB Views) that shall be used
to control what management information can be written. In order to gain write
access by this entry, the MIB view must allow access of the management
information.
notify is the name of the MIB view (see Defining MIB Views) that shall be used
to control what management information can be included in a notification. In
order to gain read access for notifications by this entry, the MIB view must
allow access of the management information.
storageType describes how the entry is stored. This is always nonVolatile .
Example
1111 1111 1011
0xff
ff:bf
Element Manager User's Manual Nimbra OneSerie
1111
0xbf