User Manual

DIS-200G Series Gigabit Ethernet Switch CLI Reference Guide
174
v2c
Specifies that the group user can use the SNMPv2c security model.
v3
Specifies that the group user can use the SNMPv3 security model.
auth
Specifies to authenticate the packet but not encrypt it.
noauth
Specifies not to authenticate and not to encrypt the packet.
priv
Specifies to authenticate and encrypt the packet.
read READ-VIEW
(Optional) Specifies a read-view that the group user can access.
write WRITE-VIEW
(Optional) Specifies a write-view that the group user can access.
notify NOTIFY-VIEW
(Optional) Specifies a write-view that the group user can access.
The notify view describes the object that can be reported its status
via trap packets to the group user.
Default
Group Name
Version
Security Level
Read View Name
Write View Name
Notify View Name
Initial
SNMPv3
noauth
Restricted
None
Restricted
ReadGroup
SNMPv1
noauth
CommunityView
None
CommunityView
ReadGroup
SNMPv2c
noauth
CommunityView
None
CommunityView
WriteGroup
SNMPv1
noauth
CommunityView
CommunityView
CommunityView
WriteGroup
SNMPv2c
noauth
CommunityView
CommunityView
CommunityView
Command Mode
Global Configuration Mode.
Command Default Level
Level: 15.
Usage Guideline
An SNMP group defines a user group by specifying the allowed security model, the read-view, the write-view,
and the notification view. The security model defines that the group user is allowed to use the specified version
of SNMP to access the SNMP agent,
The same group name can be created with security models SNMPv1, SNMPv2c, and SNMPv3 at the same
time. For SNMPv3, it can be created for SNMPv3 auth and SNMPv3 priv at the same time.
To update the view profile for a group for a specific security model, delete and create the group with the new
view profile.
The read-view defines the MIB objects that the group user is allowed to read. If read-view is not specified, then
Internet OID space 1.3.6.1 can be read.
The write-view defines the MIB objects that the group user is allowed to write. If write-view is not specified,
then no MIB objects can be written.
The notification view defines the MIB objects that the system can report its status in the notification packets to
the trap managers that are identified by the specified group user (act as community string). If notify-view is not
specified, then no MIB objects can be reported.
Example
This example shows how to create the SNMP server group “guestgroup” for SNMPv3 access and SNMPv2c.