SNMP
7450 ESS System Mangement Guide Page 307
list-name — Configures the community to reference a specific src-access-list, which will be used to
validate the source IP address of all received SNMP requests that use this community. Multiple
community instances can reference the same src-access-list. 32 characters maximum.
mask
Syntax mask mask-value [type {included | excluded} ]
no mask
Context config>system>security>snmp>view view-name
Description The mask value and the mask type, along with the oid-value configured in the view command,
determines the access of each sub-identifier of an object identifier (MIB subtree) in the view.
Each bit in the mask corresponds to a sub-identifier position. For example, the most significant bit for
the first sub-identifier, the next most significant bit for the second sub-identifier, and so on. If the bit
position on the sub-identifier is available, it can be included or excluded.
For example, the MIB subtree that represents MIB-II is 1.3.6.1.2.1. The mask that catches all
MIB-II would be 0xfc or 0b11111100.
Only a single mask may be configured per view and OID value combination. If more than one entry is
configured, each subsequent entry overwrites the previous entry.
Per RFC 2575, View-based Access Control Model (VACM) for the Simple Network Management
Protocol (SNMP),
each MIB view is defined by two sets of view subtrees, the included view subtrees,
and the excluded view subtrees. Every such view subtree, both the included and the excluded ones,
are defined in this table. To determine if a particular object instance is in a particular MIB view,
compare the object instance’s object identifier (OID) with each of the MIB view’s active entries in
this table. If none match, then the object instance is not in the MIB view. If one or more match, then
the object instance is included in, or excluded from, the MIB view according to the value of
vacmViewTreeFamilyType in the entry whose value of vacmViewTreeFamilySubtree has the most
sub-identifiers.
The no form of this command removes the mask from the configuration.
Default none
Parameters mask-value — The mask value associated with the OID value determines whether the sub-identifiers
are included or excluded from the view. (Default: all 1
s
)
The mask can be entered either:
• In hex. For example, 0xfc.
• In binary. For example, 0b11111100.
Note: If the number of bits in the bit mask is less than the number of sub-identifiers in the MIB
subtree, then the mask is extended with ones until the mask length matches the number of sub-
identifiers in the MIB subtree.
type {included | excluded} — Specifies whether to include or exclude MIB subtree objects. included
- All MIB subtree objects that are identified with a 1 in the mask are available in the view.
(Default: included).
To Next Page
Loading...
