[Contents] [Prev] [Next] [Index] [Report an Error]

Defining Access Privileges for an SNMP Group

Use the following configuration statements to define access privileges for SNMP groups:



snmp v3 vacm access group group-name ... 
snmp v3 vacm access group group-name default-context-prefix security-model (any|v1|v2c|usm) ... 
snmp v3 vacm access group group-name default-context-prefix security-model (any|v1|v2c|usm) security-level
(authentication|none|privacy) { 
read-view read-view; 
write-view write-view; 
}

To configure MIB views with a group for the VACM:

From configuration mode, access the configuration statement that configures the VACM group. [edit] user@host# edit snmp v3 vacm access group group-name
The group name is the name for a collection of SNMP security names that belong to the same SNMP access policy.
Specify the security model for access privileges. [edit snmp v3 vacm access group group-name] user@host# set default-context-prefix security-model (any|v1|v2c|usm)
To specify any security model:
user@host# set default-context-prefix security-model any
To specify the SNMPv1 security model:
user@host# set default-context-prefix security-model v1
To specify the SNMPv2c security model:
user@host# set default-context-prefix security-model v2c
To specify the SNMPv3 user-based security model (USM):
user@host# set default-context-prefix security-model usm
Specify the security level for access privileges. [edit snmp v3 vacm access group group-name] user@host# set default-context-prefix security-model (any|v1|v2c|usm) security-level (authentication|none|privacy)
To specify a security level that provides authentication but no encryption:
user@host# set default-context-prefix security-model (any|v1|v2c|usm) security-level authentication
To specify a security level that provides no authentication and no encryption:
user@host# set default-context-prefix security-model (any|v1|v2c|usm) security-level none
For SNMPv1 or SNMPv2c access, specify none as the security level.

To specify a security level that provides authentication and encryption:
user@host# set default-context-prefix security-model (any|v1|v2c|usm) security-level privacy
(Optional) Specify the view used for SNMP read access. You must specify the read-view option or the write-view option. [edit snmp v3 vacm access group group-name default-context-prefix security-model (any|v1|v2c|usm) security-level (authentication|none|privacy)] user@host# set read-view read-view
(Optional) Specify the view used for SNMP write access. You must specify the read-view option or the write-view option. [edit snmp v3 vacm access group group-name default-context-prefix security-model (any|v1|v2c|usm) security-level (authentication|none|privacy)] user@host# set write-view write-view

Defining Access Privileges for an SNMP Group

Related Topics