Technical data

RackSwitch G8000 ISCLI Reference
26
 Chapter 2: Information Commands BMD00128, September 2009
SNMPv3 System Information
SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2
framework by supporting the following:
 A new SNMP message format
 Security for messages
 Access control
 Remote configuration of SNMP parameters
See RFC2271 to RFC2276 for details about SNMPv3 architecture.
Table 2-3 SNMPv3 Commands
Command Syntax and Usage
show snmp-server v3 user
Displays User Security Model (USM) table information. The User-based Security Model (USM) in
SNMPv3 provides security services such as authentication and privacy of messages. This security
model makes use of a defined set of user identities displayed in the USM user table. To view an
example of the command output, see page 27.
Command mode: All
show snmp-server v3 view
Displays information about view, subtrees, mask and type of view. The user can control and restrict
the access allowed to a group to only a subset of the management information in the management
domain that the group can access within each context by specifying the group’s rights in terms of a
particular MIB view for security reasons. To view an example of the command output, see
page 27.
Command mode: All
show snmp-server v3 access
Displays View-based Access Control information. The access control subsystem provides authori-
zation services. The vacmAccessTable maps a group name, security information, a context,
and a message type, which could be the read or write type of operation or notification into a MIB
view. The View-based Access Control Model defines a set of services that an application can use
for checking access rights of a group. This group’s access rights are determined by a read-view, a
write-view, and a notify-view. The read-view represents the set of object instances authorized for
the group while reading the objects. The write-view represents the set of object instances autho-
rized for the group when writing objects. The notify-view represents the set of object instances
authorized for the group when sending a notification. To view an example of the command output,
see page 29.
Command mode: All