Configuring The Access Control List - Network Critical SmartNA-X User Manual

U SNMP | C SNMP
SING ONFIGURING

Configuring the access control list

The access control list maps a group (SNMPv3) or community (SNMPv1, v2c) to a read, write, or notify view,
depending on the request being processed. Get requests are mapped to the read view; set requests are mapped to
the write view; notify requests are mapped to a notify view.
Using the web UI to configure the access control list
Log in to SmartNA-X as an Administrator.
1.
Click on the chassis and select the SNMP tab.
2.
Under "View-based access control", click Configure access control list. The "SNMP Access Control List" window
3.
appears.
Click Add new access to set up a new group, or click
4.
window appears.
Select access settings from the following fields:
5.
• Group name – Specify the name of an existing group that will receive this access.
• Security model type – Specify the security model for the view, either any security model, SNMPv1,
SNMPv2c, SNMPv3 USM. Access will only be granted if the security model matches the request.
• Security level – Specify the security level for the view. Access will only be granted if the security of the request
meets the minimum requirement specified here. The order is: None (lowest), Authentication only,
Authentication + Privacy (highest).
• Read view – Specify the names of existing views to which get requests will be mapped. If no access is
required, create a 'None' view with no access to any MIB and specify it here.
• Write view – Specify the names of existing views to which set requests will be mapped. If no access is
required, create a 'None' view with no access to any MIB and specify it here.
• Notify view – Specify the names of existing views to which notify requests will be mapped. If no access is
required, create a 'None' view with no access to any MIB and specify it here.
Click Add view/Save changes to finish setting up the access control list.
6.
Click Review/apply and review the changes you have made, and then click Apply to implement your changes.
7.
Using the CLI to configure the access control list
In the CLI, use the snmp create access command to configure an access control list. For example, to create group1
with security and privacy enabled, and get and set requests to All view (include .1); notify requests to None
(exclude .1), enter the following commands:
CONTROLLER>snmp create access group1 usm priv All All None
See page 183 for information on the snmp create access command.
S NA™ 10G N
MART
to edit an existing access list. The "Add/Edit access"
DRAFT
A (S NA-X)
ETWORK CCESS MART
68