System Management Guide SNMP
Edition: 01 3HE 11018 AAAC TQZZA 193
OIDs are organized in a hierarchical tree with specific values assigned to different
organizations. A view defines a subset of the agent’s managed objects controlled by
the access rules associated with that view.
Predefined views are available that are particularly useful when configuring SNMPv1
and SNMPv2c.
The SNMP agent associates SNMPv1 and SNMPv2c community strings with an
SNMPv3 view.
4.1.7 Access Groups
Access groups associate a user group and a security model with the views the group
can access. An access group is defined by a unique combination of a group name,
security model (SNMPv1, SNMPv2c, or SNMPv3), and security level (no-
authorization-no privacy, authorization-no-privacy, or privacy).
An access group, is a template that defines a combination of access privileges and
views. A group can be associated with one or more network users to control their
access privileges and views.
Additional access parameters must be explicitly configured if the preconfigured
access groups and views for SNMPv1 and SNMPv2c do not meet your security
requirements.
4.1.8 Users
By default, authentication and encryption parameters are not configured.
Authentication parameters that a user must use in order to be validated by the
7705 SAR can be modified. SNMP authentication allows the device to validate the
managing node that issued the SNMP message and determine if the message has
been tampered with.
User access and authentication privileges must be explicitly configured. In a user
configuration, a user is associated with an access group, which is a collection of
users who have common access privileges and views.