20.2.3 Configuring MIB Accessibility by SNMPv3

Points to note

To access MIB in SNMPv3, set the set of MIB objects that you want to allow access as MIB view, and configure the User Authentication and Encryption feature as SNMP security user. Also, to associate the MIB view with the SNMP security user, configure the SNMP security group.

Command examples

1. (config)# snmp-server view "READ_VIEW" 1.3.6.1 included

   (config)# snmp-server view "READ_VIEW" 1.3.6.1.6.3 excluded

   (config)# snmp-server view "WRITE_VIEW" 1.3.6.1.2.1.1 included

   Configures a MIB view.

   • Registers the Internet group MIB (subtree: 1.3.6.1) in the READ_VIEW view.

   • Excludes the snmpModules group MIB (subtree: 1.3.6.1.6.3) as belonging to the READ_VIEW view.

   • Registers the system group MIB (subtree: 1.3.6.1.2.1.1) in the WRITE_VIEW view.

2. (config)# snmp-server user "ADMIN" "ADMIN_GROUP" v3 auth md5 "ABC*_1234" priv des "XYZ/+6789"

   Configures an SNMP security user.

   • SNMP security user name: ADMIN

   • SNMP security group name: ADMIN_GROUP

   • Authentication protocol: HMAC-MD5

   • Authentication password: ABC*_1234

   • Privacy Protocol: CBC-DES

   • Privacy Password: XYZ/+6789

3. (config)# snmp-server group "ADMIN_GROUP" v3 priv read "READ_VIEW" write "WRITE_VIEW"

   Configures an SNMP security group.

   • SNMP security group name: ADMIN_GROUP

   • Security level: Authentication required, encryption required

   • Read view name: READ_VIEW

   • Write view name: WRITE_VIEW