1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59
|
##############################################################################
# Access Control
###############################################################################
# As shipped, the snmpd demon will only respond to queries on the
# system mib group until this file is replaced or modified for
# security purposes.
####
# First, map the community name "public" into a "security name"
#sec.namesourcecommunity
com2sec notConfigUser defaultpublic
####
# Second, map the security name into a group name:
#groupName securityModel securityName
group notConfigGroup v1notConfigUser
group notConfigGroup v2cnotConfigUser
####
# Third, create a view for us to let the group have rights to:
#nameincl/excl subtreemask(optional)
view systemview included system
view systemview included interfaces
view systemview included at
view systemview included ip
view systemview included icmp
view systemview included tcp
view systemview included udp
view systemview included snmp
####
# XenServer control domain does not support IPv6.
#
view systemview excluded ipv6InterfaceTableLastChange
view systemview excluded icmpStatsInErrors.ipv6
view systemview excluded icmpStatsInMsgs.ipv6
view systemview excluded icmpStatsOutErrors.ipv6
view systemview excluded icmpStatsOutMsgs.ipv6
view systemview excluded icmpMsgStatsInPkts.ipv6
view systemview excluded icmpMsgStatsOutPkts.ipv6
####
# Finally, grant the group read-only access to the systemview view.
#groupcontext sec.model sec.level prefix readwrite noti
f
access notConfigGroup "" anynoauth exact systemview none none
###############################################################################
# System contact information
#
syslocation Unknown (edit /etc/snmp/snmpd.conf)
syscontact Root <root@localhost> (edit /etc/snmp/snmpd.conf) |