Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

Defining user groups and assigning users and views to groups

To define an SNMPv3 user group, specify the name of the group. By default, the vRouter supports the access privilege type of read-only (ro) for user groups. You do not need to set this parameter explicitly when defining a user group. After defining user groups, assign the configured users and views to them.

Note: Currently, the vRouter only read-only privileges. It does not support read-write privileges.

The following table shows the following configurations:

  • The user groups named EquipmentAuditor, LocalNetAdmin, and SuperAdmin
  • Assignment of the users auditbot, netadmin, supportl2, and support to a user group
  • Assignment of the views EquipIdent, NetConfig, TrafficIn, and IntNoDescr to a user group

To define user groups and assign users and views to the groups, perform the following steps in configuration mode.

Table 1. Defining user groups and assigning users and views to user groups

Step

Command

Define an SNMPv3 user group, one user at a time.

vyatta@R1# set service snmp v3 group EquipmentAuditor
vyatta@R1# set service snmp v3 group LocalNetAdmin 
vyatta@R1# set service snmp v3 group SuperAdmin

Assign users to an SNMPv3 user group, one user at a time.

vyatta@R1# set service snmp v3 user auditbot group EquipmentAuditor
vyatta@R1# set service snmp v3 user netadmin group LocalNetAdmin
vyatta@R1# set service snmp v3 user supportl2 group SuperAdmin
vyatta@R1# set service snmp v3 user support group SuperAdmin

Assign views to an SNMPv3 user group, one view at a time.

vyatta@R1# set service snmp v3 group EquipmentAuditor view EquipIdent
vyatta@R1# set service snmp v3 group LocalNetAdmin view NetConfig
vyatta@R1# set service snmp v3 group SuperAdmin view TrafficIn
vyatta@R1# set service snmp v3 group SuperAdmin view IntNoDescr

Commit the change.

vyatta@R1# commit

Verify the configuration.

vyatta@R1:~$ show snmp v3 group

SNMPv3 Groups:

Group               View
-----               ----
EquipmentAuditor    EquipIdent(ro)
LocalNetAdmin       NetConfig(ro)
SuperAdmin          IntNoDescr(ro)