RE: How to create a VACM view that blocks particular rows in a table

 We created the following view in snmpd.conf logic given below but its not working
 
view myVacm included .1.3.6.1.6.3.15.1.2.2
view myVacm excluded
.1.3.6.1.6.3.15.1.2.2.1.0.17.128.0.31.136.128.176.43.0.0.5.141.73.80.0.0.0.0.0.100.101.102.97.117.108.1160x:ff:ef:ff:f7:ff

rouser deepti auth -V myVacm
 
 
logic :
 
Updated OID:
> .1.3.6.1.6.3.15.1.2.2.1.0.
> 17.128.0.31.136.128.176.43.0.0.5.141.73.80.0.0.0.0.
> 0.100.101.102.97.117.108.116
> = STRING: defaultUserMD5
Mask:
1111 1111 1110
1111 1111 1111 1111  
0111 1111 1111
 
Rearrange Mask:
1111 1111 1110 1111 1111 1111 1111 0111 1111 1111
 
Converted Mask:           0x:ff:ef:ff:f7:ff
 
Out Put 
 
C:\SnmpUtility>snmpwalk -v 3 -u deepti -l authNoPriv -a MD5 -A net-snmp -m All 172.16.3.151 usmUserT
able
SNMP-USER-BASED-SM-MIB::usmUserSecurityName.".....°+....IP...."."deepti" = STRING: deepti
SNMP-USER-BASED-SM-MIB::usmUserSecurityName.".....°+....IP...."."deepti1" = STRING: deepti1
SNMP-USER-BASED-SM-MIB::usmUserSecurityName.".....°+....IP...."."defaultUserMD5" = STRING: defaultUserMD5
SNMP-USER-BASED-SM-MIB::usmUserSecurityName.".....°+....IP...."."defaultUserSHA" = STRING: defaultUserSHA
SNMP-USER-BASED-SM-MIB::usmUserCloneFrom.".....°+....IP...."."deepti" = OID: SNMPv2-SMI::zeroDotZero
SNMP-USER-BASED-SM-MIB::usmUserCloneFrom.".....°+....IP...."."deepti1" = OID: SNMPv2-SMI::zeroDotZero
SNMP-USER-BASED-SM-MIB::usmUserCloneFrom.".....°+....IP...."."defaultUserMD5" = OID: SNMPv2-SMI::zeroDotZero
SNMP-USER-BASED-SM-MIB::usmUserCloneFrom.".....°+....IP...."."defaultUserSHA" = OID: SNMPv2-SMI::zeroDotZero
SNMP-USER-BASED-SM-MIB::usmUserAuthProtocol.".....°+....IP...."."deepti" = OID: SNMP-USER-BASED-SM-MIB::usmHMACMD5AuthProtocol
SNMP-USER-BASED-SM-MIB::usmUserAuthProtocol.".....°+....IP...."."deepti1" = OID: SNMP-USER-BASED-SM-MIB::usmHMACMD5AuthProtocol
SNMP-USER-BASED-SM-MIB::usmUserAuthProtocol.".....°+....IP...."."defaultUserMD5" = OID: SNMP-USER-BASED-SM-MIB::usmHMACMD5AuthProtocol
SNMP-USER-BASED-SM-MIB::usmUserAuthProtocol.".....°+....IP...."."defaultUserSHA" = OID: SNMP-USER-BASED-SM-MIB::usmHMACSHAAuthProtocol
SNMP-USER-BASED-SM-MIB::usmUserAuthKeyChange.".....°+....IP...."."deepti" = ""
SNMP-USER-BASED-SM-MIB::usmUserAuthKeyChange.".....°+....IP...."."deepti1" = ""
SNMP-USER-BASED-SM-MIB::usmUserAuthKeyChange.".....°+....IP...."."defaultUserMD5" = ""
SNMP-USER-BASED-SM-MIB::usmUserAuthKeyChange.".....°+....IP...."."defaultUserSHA" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnAuthKeyChange.".....°+....IP...."."deepti" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnAuthKeyChange.".....°+....IP...."."deepti1" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnAuthKeyChange.".....°+....IP...."."defaultUserMD5" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnAuthKeyChange.".....°+....IP...."."defaultUserSHA" = ""
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol.".....°+....IP...."."deepti" = OID: SNMP-USER-BASED-SM-MIB::usmNoPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol.".....°+....IP...."."deepti1" = OID: SNMP-USER-BASED-SM-MIB::usmNoPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol.".....°+....IP...."."defaultUserMD5" = OID: SNMP-USER-BASED-SM-MIB::usmNoPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivProtocol.".....°+....IP...."."defaultUserSHA" = OID: SNMP-USER-BASED-SM-MIB::usmNoPrivProtocol
SNMP-USER-BASED-SM-MIB::usmUserPrivKeyChange.".....°+....IP...."."deepti" = ""
SNMP-USER-BASED-SM-MIB::usmUserPrivKeyChange.".....°+....IP...."."deepti1" = ""
SNMP-USER-BASED-SM-MIB::usmUserPrivKeyChange.".....°+....IP...."."defaultUserMD5" = ""
SNMP-USER-BASED-SM-MIB::usmUserPrivKeyChange.".....°+....IP...."."defaultUserSHA" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnPrivKeyChange.".....°+....IP...."."deepti" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnPrivKeyChange.".....°+....IP...."."deepti1" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnPrivKeyChange.".....°+....IP...."."defaultUserMD5" = ""
SNMP-USER-BASED-SM-MIB::usmUserOwnPrivKeyChange.".....°+....IP...."."defaultUserSHA" = ""
SNMP-USER-BASED-SM-MIB::usmUserPublic.".....°+....IP...."."deepti" = ""
SNMP-USER-BASED-SM-MIB::usmUserPublic.".....°+....IP...."."deepti1" = ""
SNMP-USER-BASED-SM-MIB::usmUserPublic.".....°+....IP...."."defaultUserMD5" = ""
SNMP-USER-BASED-SM-MIB::usmUserPublic.".....°+....IP...."."defaultUserSHA" = ""
SNMP-USER-BASED-SM-MIB::usmUserStorageType.".....°+....IP...."."deepti" = INTEGER: nonVolatile(3)
SNMP-USER-BASED-SM-MIB::usmUserStorageType.".....°+....IP...."."deepti1" = INTEGER: nonVolatile(3)
SNMP-USER-BASED-SM-MIB::usmUserStorageType.".....°+....IP...."."defaultUserMD5" = INTEGER: nonVolatile(3)
SNMP-USER-BASED-SM-MIB::usmUserStorageType.".....°+....IP...."."defaultUserSHA" = INTEGER: nonVolatile(3)
SNMP-USER-BASED-SM-MIB::usmUserStatus.".....°+....IP...."."deepti" = INTEGER: active(1)
SNMP-USER-BASED-SM-MIB::usmUserStatus.".....°+....IP...."."deepti1" = INTEGER: active(1)
SNMP-USER-BASED-SM-MIB::usmUserStatus.".....°+....IP...."."defaultUserMD5" = INTEGER: active(1)
SNMP-USER-BASED-SM-MIB::usmUserStatus.".....°+....IP...."."defaultUserSHA" = INTEGER: active(1)
 
~Suresh

 

 

> Date: Fri, 7 Sep 2012 11:10:35 +0100
> Subject: Re: How to create a VACM view that blocks particular rows in a table
> From: [email protected]
> To: [email protected]
> CC: [email protected]
> 
> On 7 September 2012 07:30, Suresh kumar <[email protected]> wrote:
> > Hi Dave Please find out of
> > snmpwalk -v 2c -c public -On 172.16.3.151 1.3.6.1.6.3.15.1.2.2.1
> 
> 
> > .1.3.6.1.6.3.15.1.2.2.1.3.
> > 17.128.0.31.136.128.176.43.0.0.5.141.73.80.0.0.0.0.
> > 14.100.101.102.97.117.108.116.85.115.101.114.77.68.53
> > = STRING: defaultUserMD5
> 
> OK - That gives you the information you need to determine the OID
> to put in the 'view' directive
> 
> Turn the last number in the first line into a 0
> (because you'll want to match all column objects)
> Turn the first number in the third line into a 0
> (because you'll want to match varying length usernames)
> Delete 85.115..... from the third name
> (just leaving the prefix "default")
> 
> Use the resulting OID in the view directive.
> 
> 
> As for the mask, write down a string of 1 bits,
> one for each number in this OID.
> Then take the two subidentifiers that you set to 0 above,
> and turn the corresponding bits in this list to 0 as well.
> That gives you the mask to use (in binary)
> So just convert that to hex, and you're done.
> 
> OK?
> 
> Dave

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users