Network Critical SmartNA-X - Configuring the Access Control List

68
S
MARTNA™ 10G NETWORK ACCESS (SMARTNA-X)
USING SNMP | CONFIGURING SNMP
DRAFT
Configuring the access control list
The access control list maps a group (SNMPv3) or community (SNMPv1, v2c) to a read, write, or notify view,
depending on the request being processed. Get requests are mapped to the read view; set requests are mapped to
the write view; notify requests are mapped to a notify view.
Using the web UI to configure the access control list
1. Log in to SmartNA-X as an Administrator.
2. Click on the chassis and select the SNMP tab.
3. Under “View-based access control”, click Configure access control list. The “SNMP Access Control List” window
appears.
4. Click Add new access to set up a new group, or click  to edit an existing access list. The “Add/Edit access”
window appears.
5. Select access settings from the following fields:
• Group name – Specify the name of an existing group that will receive this access.
• Security model type – Specify the security model for the view, either any security model, SNMPv1,
SNMPv2c, SNMPv3 USM. Access will only be granted if the security model matches the request.
• Security level – Specify the security level for the view. Access will only be granted if the security of the request
meets the minimum requirement specified here. The order is: None (lowest), Authentication only,
Authentication + Privacy (highest).
• Read view – Specify the names of existing views to which get requests will be mapped. If no access is
required, create a ‘None’ view with no access to any MIB and specify it here.
• Write view – Specify the names of existing views to which set requests will be mapped. If no access is
required, create a ‘None’ view with no access to any MIB and specify it here.
• Notify view – Specify the names of existing views to which notify requests will be mapped. If no access is
required, create a ‘None’ view with no access to any MIB and specify it here.
6. Click Add view/Save changes to finish setting up the access control list.
7. Click Review/apply and review the changes you have made, and then click Apply to implement your changes.
Using the CLI to configure the access control list
In the CLI, use the snmp create access command to configure an access control list. For example, to create group1
with security and privacy enabled, and get and set requests to All view (include .1); notify requests to None
(exclude .1), enter the following commands:
See page 183 for information on the snmp create access command.
CONTROLLER>snmp create access group1 usm priv All All None