Defining An Snmp Group - Dell PowerConnect B-RX Configuration Manual

•
NOTE
Engine ID must be a unique number among the various SNMP engines in the management domain.
Using the default engine ID ensures the uniqueness of the numbers.

Defining an SNMP group

SNMP groups map SNMP users to SNMP views. For each SNMP group, you can configure a read
view, a write view, or both. Users who are mapped to a group will use its views for access control.
To configure an SNMP user group, enter a command such as the following.
BigIron RX(config)# snmp-server group admin v3 auth read all write all
Syntax: [no] snmp-server group <groupname>
NOTE
This command is not used for SNMP version 1 and SNMP version 2. In these versions, groups and
group views are created internally using community strings. (Refer to
community strings"
based on the community string name. One group is for SNMP version 1 packets, while the other is
for SNMP version 2 packets.
The group <groupname> parameter defines the name of the SNMP group to be created.
The v1, v2c, or v3 parameter indicates which version of SNMP is used. In most cases, you will be
using v3, since groups are automatically created in SNMP versions 1 and 2 from community
strings.
The auth | noauth parameter determines whether or not authentication will be required to access
the supported views. If auth is selected, then only authenticated packets are allowed to access the
view specified for the user group. Selecting noauth means that no authentication is required to
access the specified view. Selecting priv means that an authentication password will be required
from the users.
The auth | noauth | priv parameter is available when you select v3, not v1 or v2.
The access <standard-acl-id> parameter is optional. It allows incoming SNMP packets to be filtered
based on the standard ACL attached to the group.
The read <viewstring> | write <viewstring> parameter is optional. It indicates that users who
belong to this group have either read or write access to the MIB.
The <viewstring> variable is the name of the view to which the SNMP group members have access.
If no view is specified, then the group has no access to the MIB.
The value of <viewstring> is defined using the snmp-server view command. The SNMP agent
comes with the "all" view, the default view that provides access to the entire MIB; however, it must
be specified when creating the group. The "all" view also allows SNMP version 3 to be backwards
compatibility with SNMP version 1 and version 2.
BigIron RX Series Configuration Guide
53-1001810-01
Octets 6 through 11 form the MAC address of the lowest port in the management module.
v1 | v2c | v3
auth | noauth | priv
[access <standard-acl-id>] [read <viewstring>] [write <viewstring>]
on page 1001.) When a community string is created, two groups are created,
Configuring your NMS
"Establishing SNMP
36
1005