Re: overwrite standard mib2/interfaces

On 17/03/2008, Masoud Fatollahy <[email protected]> wrote:
>  Is it possible to give read access to all registered mibs (both with default
> context and other context) to a group/user?

Yes.

>    If yes, how can it be done?

Firstly, you'll need to set up a working access control configuration using
the "com2sec/group/view/access" directives, rather than the shorthand
"r[ow]community/r[ow]user" directives.
    That will typically include an access line of the form:

         access  {group}  ""  ....   exact .....

If you change the token "exact" to read "prefix", then this will extend
the access rights to *all* prefixes.


>  Is it any way to give read access to mibs with different context to a client
> which is running v1/v2c snmp?

Yes.
Again, you need to be using the full "com2sec/group/view/access" directives.

Normally, you would have a line of the form

    com2sec   {someUser}  default  {community}

which would be part of allowing that community to access information
in the default context.   To allow access to information in a different
context, you should amend this to read

     com2sec  -Cn  {context}  {someUser}  default  {community}

Note that each context will require a different community name.

Dave

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/