SNMP Security Commands
Page 304 7450 ESS System Mangement Guide
SNMP Security Commands
access group
Syntax [no] access group group-name security-model security-model security-level security-
level [context context-name [prefix-match]] [read view-name-1] [write view-name-2]
[notify view-name-3]
Context config>system>security>snmp
Description This command creates an association between a user group, a security model, and the views that the
user group can access. Access parameters must be configured unless security is limited to the
preconfigured access groups and views for SNMPv1 and SNMPv2. An access group is defined by a
unique combination of the group name, security model and security level.
Access must be configured unless security is limited to SNMPv1/SNMPv2c with community strings
(see the community on page 306).
Default access group configurations cannot be modified or deleted.
To remove the user group with associated, security model(s), and security level(s), use:
no access group group-name
To remove a security model and security level combination from a group, use:
no access group group-name security-model {snmpv1 | snmpv2c | usm} security-level {no-auth-
no-privacy | auth-no-privacy | privacy}
Default none
Parameters group-name — Specify a unique group name up to 32 characters.
security-model {snmpv1 | snmpv2c | usm} — Specifies the security model required to access the
views configured in this node. A group can have multiple security models. For example, one
view may only require SNMPv1/ SNMPv2c access while another view may require USM
(SNMPv3) access rights.
security-level {no-auth-no-priv | auth-no-priv | privacy} — Specifies the required authentication
and privacy levels to access the views configured in this node.
security-level no-auth-no-privacy — Specifies that no authentication and no privacy (encryption) is
required. When configuring the user’s authentication, select the none option.
security-level auth-no-privacy — Specifies that authentication is required but privacy (encryption)
is not required. When this option is configured, both the group and the user must be configured
for authentication.
security-level privacy — Specifies that both authentication and privacy (encryption) is required.
When this option is configured, both the group and the user must be configured for
authentication. The user must also be configured for privacy.
context context-name — Specifies a set of SNMP objects that are associated with the context-name.
To Next Page
Loading...
