H3C SR6600 Command Reference Manual page 121

Views
System view
Default command level
3: Manage level
Parameters
v1: Specifies SNMPv1.
v2c: Specifies SNMPv2c.
v3: Specifies SNMPv3.
group-name: Group name, a string of 1 to 32 characters.
authentication: Specifies the security model of the SNMPv3 group to be authentication only (without
privacy).
privacy: Specifies the security model of the SNMPv3 group to be authentication and privacy.
read-view view-name: Specifies a read-only MIB view. The view-name represents a MIB view, a string of
1 to 32 characters. The users in the specified group have read only access to the objects included in the
MIB view. The default read view is ViewDefault.
write-view view-name: Specifies a read and write MIB view. The view-name argument represents a MIB
view, a string of 1 to 32 characters. The users in the specified group have read and write access to the
objects included in the MIB view. By default, no write view is configured, which means the NMS cannot
perform the write operations to all MIB objects on the device.
notify-view view-name: Specifies a trap MIB view. The view-name argument represents a MIB view, a
string of 1 to 32 characters. The system sends traps to the users in the specified group for the objects
included in the MIB view. By default, no notify view is configured, which means the agent does not send
traps to the NMS.
acl acl-number: Specifies a basic ACL to filter NMSs by source IPv4 address. The acl-number argument
represents a basic ACL number in the range of 2000 to 2999. In the specified SNMP group, only the
NMSs with the IP addresses permitted in the ACL can access the SNMP agent.
acl ipv6 ipv6-acl-number: Specifies a basic ACL to filter NMSs by source IPv6 address. The
ipv6-acl-number argument represents a basic ACL number in the range of 2000 to 2999. In the specified
SNMP group, only the NMSs with the IPv6 addresses permitted in the ACL can access the SNMP agent.
Usage guidelines
All the users in an SNMP group share the security model and access rights of the group.
In FIPS mode, only SNMPv3 is supported.
Examples
# Create the SNMPv3 group group1 and assign the no authentication, no privacy security model to the
group.
<Sysname> system-view
[Sysname] snmp-agent group v3 group1
Related commands
snmp-agent mib-view
•
snmp-agent usm-user
•
113