Network Critical SmartNA-X User Manual page 188

C L I R
OMMAND INE NTERFACE EFERENCE
SNMP
CREATE ACCESS
Use the snmp create access command to map a group of users/communities to a read, write or notify view,
depending on the request being processed. Get requests are mapped to the read view, set request are mapped to the
write view, and notify requests are mapped to a notify view.
SNMP SNMPv3
Command form snmp create access group-name {
{write-viewname} {notify-viewname}
group-name
,
any usm
noAuth, auth
read-viewname
|
|
any usm
Specifies the group (which contains users and/or community strings) to map.
Groups are created with the snmp create sectogroup command.
, , Specifies the group's security model, either USM (User Security Model, see
v1 v2c
3414), or SNMPv1/v2c. USM is the most secure, with all SNMPv3 packets
authenticated, encrypted, and decrypted. SNMPv1 and SNMPv2c is unsecured,
with authentication amounting to nothing more than a password (community
string) sent in clear text between a manager and agent.
When a single group has multiple security models, you can use
security names/users in a group have the same level of security, such as SNMP v1/v2
community strings and SNMPv3 users with no auth/priv (see the first example
below), otherwise you have to create separate access command for v3 users within
the group with
, Specifies the security level:
priv
authenticates a packet by a string match of the user name.
noAuth
authenticates a packet by using either the MD5 or SHA algorithms.
auth
authenticates a packet by using either the MD5 or SHA algorithms and encrypts
priv
the packet using the DES or AES algorithm.
Specifies the view to which get requests are mapped. This parameter must be
specified. If no access is required, create a view called 'None' that excludes access to
the OID root and specify it here. See the examples for the relevant command. The
following restrictions apply to the read view name:
• maximum of 32 alpha-numeric characters (case sensitive)
• no spaces, punctuation or other special characters
• first character must be a letter
S NA™ 10G N
MART
| | } { | |
v1 v2c noAuth auth priv
security (see the second example).
usm
DRAFT
A (S
ETWORK CCESS MART
} {read-viewname}
when all the
any
NA-X)
RFC
183