Network Critical SmartNA-X User Manual page 184

C L I R
OMMAND INE NTERFACE EFERENCE
SNMP
CREATE VIEW
Use the snmp create view command to create a named subset view of the OID tree. A view is a mapping between
SNMP objects and the access rights available for those objects. An object can have different access rights in each
view. Access rights indicate whether the object is accessible by either a community string or a user.
Create MIB views to control the OID range that SNMPv3 users can access. For example, create a view that
excludes access to the OID root; any user within such a group will have no read, write or notify access to the MIB.
The system does not create any MIB views by default.
SNMP SNMPv3
snmp create view viewname {
Command form
{viewname}
{
include
{object-identifier [mask]}
|
|
include exclude
Specifies a name to identify the MIB view. The following restrictions apply to the
view name:
• maximum of 32 alpha-numeric characters (case sensitive)
• no spaces, punctuation or other special characters
• first character must be a letter
| } Specifies whether to include or exclude the view subtree or family of subtrees from
exclude
the MIB view.
Specifies the OID string of the subtree to include or exclude from the view. OID
string is 256 characters in length. For example, the system subtree is specified by the
OID string .1.3.6.1.2.1.1.
(Optional) For mask, specify a list of hex octets (optionally separated by '.' or ':')
with the set bits indicating which sub identifiers in the view OID to match against.
If not specified, this defaults to matching the OID exactly (all bits set). The OID
mask is 47 characters in length. The format of the OID mask is xx.xx.xx...or
xx.xx.xx... and is 16 octets in length. Each octet is 2 hexadecimal characters
separated by either . (period) or : (colon). Only hex characters are accepted in this
field. For example, OID mask FA.80 is 11111010.10000000.
A family mask is used to define a family of view subtrees. The family mask indicates
which sub-identifiers of the associated family OID string are significant to the
family's definition. A family of view subtrees allows control access to one row in a
table, in a more efficient manner.
More usefully, the mask can be used to define a view covering a particular row (or
rows) in a table, by matching against the appropriate table index value but skipping
the column sub-identifier. For more information, see
http://www.net-snmp.org/wiki/index.php/
Vacm#VACM_Masks.2C_or_How_to_restrict_access_to_a_particular_index_.28ro
w.29_in_a_Table.
S NA™ 10G N
MART
} {object-identifier [mask]}
DRAFT
A (S NA-X)
ETWORK CCESS MART
179