User guide

Additional configuration for SNMPv3 agent entities SNMP
1-95
iMG/RG Software Reference Manual (System Configuration)
vacmAccessSecurityLevel
is noAuthNoPriv for no authentication and no privacy, and authNoPriv is for MD5 authentication with
no privacy.
vacmAccessContextMatch
is exact or prefix to indicate how the context of a request must match vacmAccessContextPrefix.
For example, if an authenticated management request is sent in context “AT-iMG646MOD", and if the value of
vacmAccessContextPrefix and vacmAccessContextMatch are “AT-iMG646MOD” and "prefix”,
then the context name in (or derived from) the request is determined to be a correct match to the values in
this vacmAccessEntry.
vacmAccessReadViewName
is a vacmViewTreeFamilyViewName (defined by at least one vacmViewTreeFamilyEntry) identify-
ing the view subtrees accessible for Get, GetNext, and GetBulk requests.
vacmAccessWriteViewName
is a vacmViewTreeFamilyViewName (defined by at least one vacmViewTreeFamilyEntry) identify-
ing the view subtrees accessible for Set requests.
vacmAccessNotifyViewName
is a vacmViewTreeFamilyViewName (defined by at least one vacmViewTreeFamilyEntry) identify-
ing the view subtrees from which objects may be included as VarBinds in Trap messages and Inform
requests.
vacmAccessStorageType
is nonVolatile, permanent, or readOnly.
1.6.2.4 Assigning principals to groups
A
PRINCIPAL is generic term to refer to an SNMPv3 user or an SNMPv2c or SNMPv1 community string (see
RFC2571).
To assign a principal to a group, add one or more vacmSecurityToGroupEntry definition in the
snmpd.cnf file accordingly the following syntax:
vacmSecurityToGroupEntry <vacmSecurityModel> <vacmSecurityName> <vac-
mGroupName> <vacmSecurityToGroupStorageType>
vacmSecurityModel
is snmpv1 for SNMPv1, snmpv2c for SNMPv2c, or usm for SNMPv3.
vacmSecurityName
is a human readable string which is the principal.
vacmGroupName
is a human readable string which is the groupname. The groupname must be defined by at least one vacmAcc-
essEntry.