Step 5
Run:
quit
Return to the system view.
Step 6
Run:
snmp-agent mib-view
{
excluded
|
included
}
view-name
oid-tree
A MIB view is created, and manageable MIB objects are specified.
By default, an NM station has rights to access the objects in the Viewdefault view.
l
excluded
: If a few MIB objects on the device or some objects in the current MIB view do
not or no longer need to be managed by the NM station,
excluded
needs to be specified in
the command to exclude these MIB objects.
l
included
: If a few MIB objects on the device or some objects in the current MIB view need
to be managed by the NM station,
included
needs to be specified in the command to include
these MIB objects.
Step 7
Run:
snmp-agent group
v3
group-name
[
authentication
|
privacy
] [
read-view
read-view
|
write-view
write-view
|
notify-view
notify-view
]
*
[
acl
acl-number
]
The read and write permission is configured for the user group.
l
read-view
needs to be configured in the command if the NM station administrator needs the
read permission in the specified view in some cases. For example, a low-level administrator
needs to read certain data.
write-view
needs to be configured in the command if the NM
station administrator needs the read and write permissions in the specified view in some
cases. For example, a high-level administrator needs to read and write certain data.
l
notify-view
needs to be configured in the command if you want to filter out irrelevant alarms
and configure the managed device to send only the alarms of specified MIB objects to the
NM station. If the parameter is configured, only the alarms of the MIB objects specified by
notify-view
is sent to the NM station.
l
authentication
or
privacy
can be configured in the command to improve security. If
authentication
is configured, only authentication is performed. If
privacy
is configured,
both authentication and privacy are performed.
l
If some NM stations that are in the same SNMPv3 user group need to have rights to access
the objects in the Viewdefault view, [
read-view
read-view
|
write-view
write-view
|
notify-
view
notify-view
] does not need to be configured in the command.
l
acl
: If all the NM stations that are in the same SNMPv3 user group need to manage specified
objects on the device,
acl
acl-number
does not need to be configured in the command.
If some of the NM stations that are in the same SNMPv3 user group need to manage specified
objects on the device, then
mib-view
and
acl
need to be configured in the command.
Step 8
Run:
commit
The configuration is committed.
----End
Follow-up Procedure
After the access rights are configured, especially after the IP address of the NM station is
specified, if the IP address changes (for example, the NM station changes its location, or IP
HUAWEI NetEngine5000E Core Router
Configuration Guide - System Management
3 SNMP Configuration
Issue 01 (2011-10-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
79
