Management Features; Table 17: Relationship Among Groups, Security Levels, And Views - Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Configuration Manual

JUNOSe 11.1.x System Basics Configuration Guide
access list, if nonzero, is used to validate the IP address. If the access list number is
zero, the IP address is accepted. A nonmatching community or an invalid IP address
causes an SNMP authentication error. Each entry in the community table identifies:

Management Features

Management features of SNMPv3 allow you to specify who will receive notifications
and to define MIB views that users in different groups can access:

Table 17: Relationship Among Groups, Security Levels, and Views

152
Overview
An SNMP community name
An SNMP view name
A user's privilege level
Read-only (ro)
Read-write (rw)
Administrator (admin)
An IP access list name
Notification Message that informs you of a status change; the equivalent of a
trap in SNMPv1.
View Definition of the management information that is available: read, write,
or notification. Predefined views are available for each group:
everything Includes all MIBs associated with the router, except the
packetMirror MIB
user Includes all MIBs associated with the router, except the packetMirror
MIB and standard and enterprise MIBs used to configure SNMP operation
nothing Excludes all MIBs
mirrorAdmin Includes the packetMirror MIB
User An individual who requires access to the router. The router may provide
authentication and privacy for the user through SNMPv3. Each user is associated
with a group.
Group A set of users with the same access privileges to the router. Three
predefined groups are available: admin, public, and private. Table 17 on page 152
shows the security levels and views associated with these groups.
Group Name Security Level
admin authentication
and privacy
mirror authentication
and privacy
public none
Read View Write View
everything everything
mirrorAdmin mirrorAdmin
user nothing
Notification/
Trap View
everything
mirrorAdmin
nothing