Predefined Groups
When you upgrade the switch from v5.x application software to v6.x, the following predefined groups are created:
- normalRO--Provides read-only access to the normal view.
- normalRW--Provides read-write access to the normal view.
- adminRO--Provides read-only access to the admin view.
- adminRW--Provides read-write access to the admin view.
- initial--Provides read-only access to the restricted view. The predefined user initial is assigned to this group.
- internet--Provides read-write access to the internet view, which is created for administrative SNMPv3 users.
The internet group is accessible only by SNMPv3. You cannot use CLI commands to access the group.
Do not assign the internet group to a community string. The group requires both authentication and encryption, which community strings do not support.
- noAccess--Provides only notify access to the internet view. Assign community strings or users to this group when you want them to receive trap messages, but not have read or write access.
CAUTION:
Avaya recommends that you not modify these predefined groups. When you upgrade the switch from v5.x application software to v6.x, the existing community strings are assigned to these predefined groups. If you modify them, the community strings may lose their access to the switch. For more information on the migration of existing community strings, see "Migration of Existing Community Strings."
None of the predefined groups, except the internet group, require authentication or encryption. Thus these groups are accessible by SNMPv1, v2, or v3. The internet group, however, requires both authentication and encryption and is accessible only by SNMPv3.
Table�20 lists all the predefined views, groups, and users.
Table�20:�Predefined Views, Groups, and Users �
View |
Group |
User |
Community String |
normal--Includes the MIB objects that the normal security level included. The view includes all the supported MIBs except those objects that are administrator only. |
normalRO--Provides read-only access to the normal view. |
|
public |
normalRW--Provides read-write access to the normal view. |
|
|
admin--Includes the MIB objects that the admin security level included. The view includes all the supported MIBs including the administrator-only objects. The USM and VACM MIBs are not included in the predefined admin view. |
adminRO--Provides read-only access to the admin view. |
|
|
adminRW--Provides read-write access to the admin view. |
|
|
restricted |
initial--Provides read-only access to the restricted view. |
initial |
|
internet--Includes all MIB objects, including the USM and VACM MIBs. The view is created for administrative SNMPv3 users and is assigned to the predefined internet group, which provides read-write access to the view. |
internet The internet group is accessible only by SNMPv3. You cannot use CLI commands to access the group. Do not assign the internet group to a community string. The group requires both authentication and encryption, which community strings do not support. |
|
|
|
|
|