NEC N8406-023, Command Reference Manual

Page: 93 / 156

N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 93
SNMPv3 View-based Access Control Model configuration
The view-based Access Control Model defines a set of services that an application can use for checking access
rights of the user. Access control is needed when the user has to process SNMP retrieval or modification request
from an SNMP entity.
The following table describes the User Access Control Configuration commands.
Table 87 View-based Access Control Configuration commands
Command Description
snmp-server access < 1-32 >
name < 1-32 characters >
Defines the name of the group, up to a maximum of 32 characters.
Command mode : Global configuration
snmp-server access < 1-32 >
security {usm|snmpv1|snmpv2}
Allows you to select the security model to be used.
Command mode : Global configuration
snmp-server access < 1-32 >
level {noAuthNoPriv|authNo-
Priv|authPriv}
Defines the minimum level of security required to gain access rights. The
level
noAuthNoPriv
means that the SNMP message will be sent
without authentication and without using a privacy protocol. The level
authNoPriv
means that the SNMP message will be sent with
authentication but without using a privacy protocol. The
authPriv
means that the SNMP message will be sent both with authentication and
using a privacy protocol.
Command mode : Global configuration
snmp-server access < 1-32 >
read-view < 1-32 characters >
Defines a 32 character long read view name that allows you read access to
a particular MIB view. If the value is empty or if there is no active MIB view
having this value then no access is granted.
Command mode : Global configuration
snmp-server access < 1-32 >
write-view < 1-32 characters >
Defines a 32 character long write view name that allows you write access
to the MIB view. If the value is empty or if there is no active MIB view
having this value then no access is granted.
Command mode : Global configuration
snmp-server access < 1-32 >
notify-view < 1-32
characters >
Defines a 32 character long notify view name that allows you notify access
to the MIB view.
Command mode: Global configuration
no snmp-server access < 1-32 >
Deletes the View-based Access Control entry.
Command mode : Global configuration
show snmp-server v3 access
Displays the View-based Access Control configuration.
Command mode : All
SNMPv3 Group configuration
The following table describes the SNMPv3 Group Configuration commands.
Table 88 SNMPv3 Group Configuration commands
Command Description
snmp-server group < 1-16 >
security {usm|snmpv1|snmpv2}
Defines the security model.
Command mode : Global configuration
snmp-server group < 1-16 >
user-name < 1-32 characters >
Sets the user name
.
The user name can have a maximum of 32
characters.
Command mode : Global configuration
snmp-server group < 1-16 >
group-name < 1-32 characters >
The name for the access group
.
The group name can have a
maximum of 32 characters.
Command mode : Global configuration
no snmp-server group < 1-16 >
Deletes the
vacmSecurityToGroup
entry.
Command mode : Global configuration
show snmp-server v3 group
Displays the current
vacmSecurityToGroup
configuration.
Command mode : All