User's Manual

Technical Configuration Guide for SNMP v2.0 December 2006

______________________________________________________________________________________________________

NORTEL External Distribution

Sub-Context: service

Current Context:

accesslevel <level>

access-strict <true|false>

create

delete

disable

enable

host <ipaddr>

info

mode <mode>

name <name>

network <addr/mask>

precedence <precedence>

snmp-group-add <group name> <model>

snmp-group-del <group name> <model>

snmp-group-info

username <string>

ERS-8610:5# config sys access-policy policy 1 service ?

Sub-Context:

Current Context:

ftp <enable|disable>

http <enable|disable>

info

rlogin <enable|disable>

snmpv3 <enable|disable>

ssh <enable|disable>

telnet <enable|disable>

tftp <enable|disable>

3.3.1 SNMPv3 Group Access Policy: Configuration Example

For this example, we wish to create a policy for read-write-all access and only allow telnet and

SNMPv3 access only for SNMPv3 usm group named group_example. Please see Section 5 in

regards to how to configure SNMPv3.

a) Enable access policies globally

• ERS-8606:5# config sys access-policy enable true

b) Assuming no access policies have been created, we can start with policy 2 and name the

policy policy2.

• ERS-8606:5# config sys access-policy policy 2 create

• ERS-8606:5# config sys access-policy policy 2 name policy2

c) Add read/write/all access level to policy 2:

• ERS-8606:5# config sys access-policy policy 2 accesslevel rwa

d) Add the usm group ‘group_example’ to policy 2: