Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 362)

344 Multi-Service IronWare Security Configuration Guide
53-1003035-02
Defining SNMP views
10
Defining SNMP views
SNMP views are named groups of MIB objects that can be associated with user accounts to allow
limited access for viewing and modification of SNMP statistics and system configuration. SNMP
views can also be used with other commands that take SNMP views as an argument. SNMP views
reference MIB objects using object names, numbers, wildcards, or a combination of the three. The
numbers represent the hierarchical location of the object in the MIB tree. You can reference
individual objects in the MIB tree or a subset of objects from the MIB tree.
You can create up to 10 views on the device. This number cannot be changed.
To create an SNMP view, enter one of the following commands.
Brocade(config)# snmp-server view Maynes system included
Brocade(config)# snmp-server view Maynes system.2 excluded
Brocade(config)# snmp-server view Maynes 2.3.*.6 included
Brocade(config)# write mem
NOTE
The snmp-server view command supports the MIB objects as defined in RFC 1445.
Syntax: [no] snmp-server view name mib_tree included | excluded
The name parameter can be any alphanumeric name you choose to identify the view. The names
cannot contain spaces.
The mib_tree parameter is the name of the MIB object or family. MIB objects and MIB sub-trees
can be identified by a name or by the numbers called Object Identifiers (OIDs) that represent the
position of the object or sub-tree in the MIB hierarchy. You can use a wildcard (*) in the numbers to
specify a sub-tree family.
The included | excluded parameter specifies whether the MIB objects identified by the mib_family
parameter are included in the view or excluded from the view.
NOTE
All MIB objects are automatically excluded from any view unless they are explicitly included;
therefore, when creating views using the snmp-server view command, indicate which portion of the
MIB you want users to access.
For example, you may want to assign the view called “admin” a community string or user group. The
“admin” view will allow access to the Unified IP MIB objects that begin with the 10.3.6.1.4.1.1991
object identifier. Enter the following command.
Brocade
(config)# snmp-server view admin 10.3.6.1.4.1.1991 included
You can exclude portions of the MIB within an inclusion scope. For example, if you want to exclude
the snAgentSys objects, which begin with 10.3.6.1.4.1.1991.1.1.2 object identifier from the admin
view, enter a second command such as the following.
Brocade
(config)# snmp-server view admin 10.3.6.1.4.1.1991.1.1.2 excluded
Note that the exclusion is within the scope of the inclusion.
To delete a view, use the no parameter before the command.