ibrix_snmpview -a -v VIEWNAME [-t {include|exclude}] -o OID_SUBTREE [-m MASK_BITS]
The subtree is added in the named view. For example, to add the X9000 Software private MIB to
the view named
hp
, enter:
ibrix_snmpview -a -v hp -o .1.3.6.1.4.1.18997 -m .1.1.1.1.1.1.1
Configuring groups and users
A group defines the access control policy on managed objects for one or more users. All users
must belong to a group. Groups and users exist only in SNMPv3. Groups are assigned a security
level, which enforces use of authentication and privacy, and specific read and write views to
identify which managed objects group members can read and write.
The command to create a group assigns its SNMPv3 security level, read and write views, and
context name. A context is a collection of managed objects that can be accessed by an SNMP
entity. A related option,
-m
, determines how the context is matched. The format follows:
ibrix_snmpgroup -c -g GROUPNAME [-s {noAuthNoPriv|authNoPriv|authPriv}]
[-r READVIEW] [-w WRITEVIEW] [-x CONTEXT_NAME] [-m {exact|prefix}]
For example, to create the group
group2
to require authorization, no encryption, and read access
to the
hp
view, enter:
ibrix_snmpgroup -c -g group2 -s authNoPriv -r hp
The format to create a user and add that user to a group follows:
ibrix_snmpuser -c -n USERNAME -g GROUPNAME [-j {MD5|SHA}]
[-k AUTHORIZATION_PASSWORD] [-y {DES|AES}] [-z PRIVACY_PASSWORD]
Authentication and privacy settings are optional. An authentication password is required if the
group has a security level of either authNoPriv or authPriv. The privacy password is required if the
group has a security level of authPriv. If unspecified, MD5 is used as the authentication algorithm
and DES as the privacy algorithm, with no passwords assigned.
For example, to create
user3
, add that user to
group2
, and specify an authorization password
for authorization and no encryption, enter:
ibrix_snmpuser -c -n user3 -g group2 -k auth-passwd -s authNoPriv
Deleting elements of the SNMP configuration
All of the SNMP commands employ the same syntax for delete operations, using the
-d
flag to
indicate that the following object is to be deleted. The following command deletes a list of hosts
that were trapsinks:
ibrix_snmptrap -d -h lab15-12.domain.com,lab15-13.domain.com,lab15-14.domain.com
There are two restrictions on SNMP object deletions:
•
A view cannot be deleted if it is referenced by a group.
•
A group cannot be deleted if it is referenced by a user.
Listing SNMP configuration information
All of the SNMP commands employ the same syntax for list operations, using the
-l
flag. For
example:
ibrix_snmpgroup -l
This command lists the defined group settings for all SNMP groups. Specifying an optional group
name lists the defined settings for that group only.
Setting up SNMP notifications
39
