Hi All, I've some problem with configuring VACM. My VACM configurations in snmpd.conf seems to be not working. Any help on this would be really appreciated.
Below are my VACM configurations in snmpd.conf. (whole snmpd.conf is attached with this mail) # User Creation createUser noAuthUser createUser MD5User MD5 "demo-password" createUser MD5DESUser MD5 "demo-password" DES # # Group Specification # group-name sec.model sec.name group ro_group usm noAuthUser # SNMPv3 username == sec.name group ro_group usm MD5User group rw_group usm MD5DESUser # # View Specification # view-name incl/excl subtree mask view all included .1 # default-view which includes the whole MIB tree view system_view excluded .1 view system_view included system view system_view excluded sysLocation.0 view if_view excluded .1 view if_view included system view if_view included ifTable # # Access Specification # group-name context sec.model sec.level match read write notif access ro_group "" usm noauth exact system_view none none access ro_group "" usm auth exact if_view none none access rw_group "" usm priv exact all if_view none I expect noAuthUser to have read access only to system_view (which has only system sub-tree). But I'm able to read everything (for example, some object from ifMIB; sysLocation.0 which is excluded; etc) from whole MIB tree via noAuthUser. Access control restrictions seems to have no effect. Am I missing anything? -- ///////////////////////// // Bakshi Gulam // // http://www.gulam.in // /////////////////////////
snmpd.conf
Description: Binary data
------------------------------------------------------------------------------ Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk
_______________________________________________ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users
