The SNMPD.CONF file supports the following types of entries:
- USM_USER
- Defines a user for the user-based
security model (USM).
- VACM_GROUP
- Defines a security group (made
up of users or communities) for the view-based access control model
(VACM).
- VACM_VIEW
- Defines a particular set of MIB
objects, called a view, for the VACM.
- VACM_ACCESS
- Identifies the access permitted
to different security groups for the VACM.
- NOTIFY
- Identifies management targets to
receive notifications.
- NOTIFY_FILTER_PROFILE
- Associates a notify
filter with a particular set of target parameters.
- NOTIFY_FILTER
- Defines a filter profile used
to filter notifications (for example, traps or informs).
- TARGET_ADDRESS
- Defines a management application's
address and identifies parameters to be used in sending notifications
or in processing requests when using community-based security.
- TARGET_PARAMETERS
- Defines the message processing
and identifies security parameters to be used in sending notifications
to a particular management target or when processing requests when
using community-based security.
- COMMUNITY
- Defines a community for community-based security. Communities
defined with this syntax are supported for compatibility purposes
with the statements from the PW.SRC file, but they cannot be changed
dynamically by way of SNMP SET commands. If you are defining community-based
security for the first time, you should use the SNMP_COMMUNITY statement.
- SNMP_COMMUNITY
- Defines a community for community-based
security. Communities defined with this statement can be dynamically
changed by way of SNMP SET commands to the snmpCommunityTable.
The
following statements must also be configured to complete the definition
of a community:
- VACM_GROUP specifies the group associated with the community.
- VACM_ACCESS specifies the access allowed for the community group.
- TARGET_ADDRESS defines the address range permitted to use a particular
community name and the maximum size of a response from the SNMP agent.
The transportTag field of the SNMP_COMMUNITY
statement specifies the name of the associated TARGET_ADDRESS statement.
- TARGET_PARAMETERS defines the SNMP protocol to be used with this
community name.
- DEFAULT_SECURITY
- Identifies the default security posture configured for the SNMP
agent. Additional security definitions defined by the use of the preceding
eight entry definition types augment any default security configurations
defined as a result of the DEFAULT_SECURITY statement.