SNMPv3 Group Management

To support user-based security for SNMPv3, LSMS provides the SNMP Configuration > Group Configuration > Add/Delete/Edit/Show menu options. These menu options are accessible only when the SNMP Global Mode is set to SNMPv3 ONLY or Both. Following is an example of the Add menu.

Add Group Screen

The Group Name must be unique, 1 - 32 alphanumeric characters in length, and is case sensitive.

The Security Level is mandatory. Valid values are noAuthNoPriv, AuthNoPriv, and AuthPriv as shown in Table 1.
SNMPv3 Security Levels
Level Authentication Encryption Details
noAuthNoPriv

(no authentication, no privacy)

Username No Uses a username match for authentication
AuthNoPriv

(authentication, no privacy)

Yes (SHA) No Provides authentication based on the algorithms available in the net-snmp API
AuthPriv (authentication and privacy) Yes (SHA) Yes (DES/AES) Provides authentication and encryption based on the algorithms available in the net-snmp API

The Read View name is optional, and must be specified exactly as configured in the view. The specified view must already be configured to be added to the group. If a read view is not selected for a group, the group will not have read access to any of the LSMS MIB objects.

The Write View name is optional, and must be specified exactly as configured in the view. The specified view must already be configured to be added to the group. If a write view is not selected for a group, the group will not have write access to any of the LSMS MIB objects.

A group that is associated with any user cannot be deleted. For information about users, see SNMPv3 User Management.