Alcatel-Lucent 7210 SAS E OS System Management Manual page 176

SNMP Security Commands
usm-community
Syntax usm-community community-string group group-name
no usm-community community-string
Context config>system>security>snmp
Description This command is used to associate a community string with an SNMPv3 access group and its view.
The access granted with a community string is restricted to the scope of the configured group.
Alcatel-Lucent's SR OS implementation of SNMP uses SNMPv3. In order to implement SNMPv1
and SNMPv2c configurations, several access groups are predefined. In order to implement SNMP
with security features (Version 3), security models, security levels, and USM communities must be
explicitly configured. Optionally, additional views which specify more specific OIDs (MIB objects in
the subtree) can be configured.
The no form of this command removes a community string.
Default none
Parameters
community-string — Configures the SNMPv1/SNMPv2c community string to determine the
group — Specify the group that governs the access rights of this community string. This group must
view
Syntax view view-name subtree oid-value
no view view-name [subtree oid-value]
Context config>system>security>snmp
Description
This command configures a view. Views control the accessibility of a MIB object within the
configured MIB view and subtree. Object identifiers (OIDs) uniquely identify MIB objects in the
subtree. OIDs are organized hierarchically with specific values assigned by different organizations.
Once the subtree (OID) is identified, a mask can be created to select the portions of the subtree to be
included or excluded for access using this particular view. See the mask command. The view(s)
configured with this command can subsequently be used in read, write, and notify commands which
are used to assign specific access group permissions to created views and assigned to particular
access groups.
Multiple subtrees can be added or removed from a view name to tailor a view to the requirements of
the user access group.
The no view view-name command removes a view and all subtrees.
The no view view-name subtree oid-value removes a sub-tree from the view name.
Default
No views are defined.
Parameters view-name — Enter a 1 to 32 character view name. (Default: none)
Page 176
SNMPv3 access permissions to be used.
be configured first in the config system security snmp access group context.
(Default: none)
7210 SAS-E OS System Management Guide