VACM_VIEW entry

VACM_VIEW viewName viewSubtree viewMask viewType storageType

Field definitions

viewName
Indicates the textual name of the view for the View-Based Access Control Model. View names do not need to be unique. Multiple entries with the same name together define one view. However, the viewName, together with the subtree object ID, must be unique to an SNMP engine. Valid values are 1–32 characters in length. There is no default value.
viewSubtree
Indicates the MIB object prefix of the MIB objects in the view. Valid values are an object ID of up to 128 sub-OIDs, a textual object name (or object prefix), or a combination of textual object name followed by numeric sub-OIDs. The name must be found within the compiled MIB or in the logical extension to the MIB, the /etc/mibs.data file. There is no default value.
Guideline: For views that govern notify operations (traps or informs), the viewSubtree and viewMask are used to verify access to all the MIB objects in the notification, and access to the notification OID (for example, the value in the snmpTrapOID MIB object). All notifications that the SNMP agent sends include the following MIB objects:
  • sysUpTime
  • snmpTrapOID
  • snmpTrapEnterprise
Therefore, the most granular viewSubtree that can be specified for notifications is internet (an OID of 1.3.6.1) to permit the members of a group access to these standard notification MIB objects.
viewMask
Indicates a mask that specifies which of the sub-OIDs in the subtree are relevant. See RFC 3415 for further information about the viewMask. Valid values are a hex string of up to 16 bytes (up to 128 bits), where each hexadecimal digit represents four bits. Each bit indicates whether or not the corresponding sub-OID in the subtree is relevant, or a dash (-) to indicate the default value (a mask of all ones meaning all sub-OIDs are relevant).
viewType
Indicates the type of the view definition. Valid values are included to indicate the MIB objects identified by this view definition are within the view, excluded to indicate the MIB objects identified by this view definition are excluded from the view, or a dash (-) to indicate the default value of included.
storageType
Indicates the type of storage in which this definition is to be maintained. Storage types are defined in RFC 1903. Note that the value of volatile is not supported in the SNMPD.CONF file. Valid values are:
nonVolatile
Indicates the entry definition persists across reboots of the SNMP agent; it can, however, be changed or even deleted by dynamic configuration requests.
permanent
Indicates the entry definition persists across reboots of the SNMP agent; it can be changed but not deleted by dynamic configuration requests.
readonly
Indicates the entry definition persists across reboots of the SNMP agent; it cannot be changed or deleted by dynamic configuration requests.
dash (-)
Indicates the default value of nonVolatile