Romain Kang drew a beautiful diagram depicting the VACM access control
configuration tokens and how they interact with each other:
Here is something similair, in text format:
#*************************************************************
# Define the views that the demogroup will be
# restricted to.
#
# Format:
# view NAME TYPE SUBTREE [MASK]
#
view demoWrite included .1.3.6.1.4.1.2021.14.1.1
view demoRead included .1.3.6.1.4.1.2021.14.1.1
view demoRead included .1.3.6.1.2.1.1
# ---+----
# +---------------------------------------------------------+
# |
#************************************************************* |
# Map any v1 style communities to a securityName |
# |
# Format: |
# com2sec NAME SOURCE COMMUNITY |
# |
com2sec v1User default demopublic_v1 |
com2sec v2cUser default demopublic |
# ---+--- |
# +----------------------------------------------------+ |
# | |
# | |
#************************************************************** | |
# Define the demogroup users and their access models | |
# | |
# Format: | |
# group NAME MODEL SECURITY | |
# | |
# +----------------------------------------+ |
# \|/ |
# _______ |
group demogroup v1 v1User |
group demogroup v2c v2cUser |
# ----+---- |
# +---------------------------------------------------+ |
# | |
# | |
#*********************************************************** | |
# Define views for the group | |
# | |
# Format: | |
# access NAME CONTEXT MODEL LEVEL PREFX READ WRITE NOTIFY | |
# | |
# +--------------------------------------------------+ |
# | +--------+---------------+
# \|/ \|/ \|/
# _________ ________ _________
access demogroup "" any noauth prefix demoRead demoWrite none
Last modified: Wednesday, 01-Aug-2018 04:41:28 UTC
For questions regarding web content and site functionality, please write to the net-snmp-users mail list.