System Management Guide SNMP
Edition: 01 3HE 11018 AAAC TQZZA 215
4.8.2.1.2 SNMP Security Commands
snmp
Syntax snmp
Context config>system>security
Description This command enables the context to configure SNMPv1, SNMPv2c, and SNMPv3
parameters
access group
Syntax [no] access group group-name security-model {snmpv1 | snmpv2c | usm}
security-level {no-auth-no-privacy | auth-no-privacy | privacy} [context context-name
[prefix-match {exact | prefix}]] [read view-name-1] [write view-name-2] [notify
view-name-3]
Context config>system>security>snmp
Description This command creates an association between a user group, a security model, and the views
that the user group can access. Access parameters must be configured unless security is
limited to the preconfigured access groups and views for SNMPv1 and SNMPv2c. An access
group is defined by a unique combination of the group name, security model, and security
level.
Access must be configured unless security is limited to SNMPv1/SNMPv2c with community
strings (see community).
Default access group configurations cannot be modified or deleted.
To remove the user group with associated security models and security levels, use the
command no access group group-name.
To remove a security model and security level combination from a group, use the command
no access group group-name security-model {snmpv1 | snmpv2c | usm} security-level
{no-auth-no-privacy | auth-no-privacy | privacy}.
Default n/a
Parameters group-name — specifies a unique group name up to 32 characters
security-model {snmpv1
| snmpv2c | usm} — specifies the security model required to
access the views configured in this node. A group can have multiple security models.
For example, one view may only require SNMPv1/ SNMPv2c access while another
view may require USM (SNMPv3) access rights.
security-level {no-auth-no-priv | auth-no-priv | privacy} — specifies the required
authentication and privacy levels to access the views configured in this node