Network Critical SmartNA-X User Manual page 181

C L I R
OMMAND INE NTERFACE EFERENCE
SNMP
CREATE SECTOGROUP
Use the snmp create sectogroup command to map security names into a named group. Several group directives
can specify the same group name, allowing a single access setting to apply to several users and/or community
strings.
A group defines the access rights afforded to all securityNames which belong to that group. The combination of a
securityModel and a securityName maps to at most one group. A group is identified by a groupName.
SNMP SNMPv3
Command form snmp create sectogroup groupname {
groupname
,
usm
securityName
Examples • Map security name user1 into the USM security group group1:
CONTROLLER>snmp create sectogroup group1 usm user1
• Map security name user2 into the USM security group group1:
CONTROLLER>snmp create sectogroup group1 usm user2
• Map security name v1User into the SNMPv1 security group group3:
CONTROLLER>snmp create sectogroup group3 v1 v1User
• Map security name v2User into the SNMPv2c security group group4:
CONTROLLER>snmp create sectogroup group4 v2c v2User
|
Specifies the group name to create. The following restrictions apply to the group
name:
• maximum of 32 alpha-numeric characters (case sensitive)
• no spaces, punctuation or other special characters
• first character must be a letter
, Specifies the group's Security Model, either USM (User Security Model, see
v1 v2c
3414), or SNMPv1/v2c. USM is the most secure, with all SNMPv3 packets
authenticated, encrypted, and decrypted. SNMPv1 and SNMPv2c is unsecured,
with authentication amounting to nothing more than a password (community
string) sent in clear text between a manager and agent.
Specifies the security name created with the snmp create user command
(SNMPv3), or one of the securityNames created with the snmp create comtosec
command (SNMPv2c/v3). The following restrictions apply to the security name:
• maximum of 32 alpha-numeric characters (case sensitive)
• no spaces, punctuation or other special characters
• first character must be a letter
S NA™ 10G N
MART
| | } securityName
usm v1 v2c
DRAFT
A (S NA-X)
ETWORK CCESS MART
RFC
176