CISCO IOS in a Nutshell

Name

snmp-server group — global

Synopsis

snmp-server group [name 
               access] [mode 
               view] [access access-list]
no snmp-server group

Configures

SNMP

Default

No groups defined

Description

This command allows you to associate one or more views (defined by the snmp-server view command) in a group for the purpose of controlling access to the data objects included in the view.

name access

The name of the group, followed by the type of access allowed to the group. The name is any string; possible values for access are listed in Table 15-20.

Table 17-7. Types of SNMP access

Access type	Privileges granted
v1	Access allowed to SNMP Version 1 managers (insecure)
v2c	Access allowed to SNMP Version 2 managers (insecure)
v3 auth	Access allowed to SNMP Version 3 managers; cryptographic authentication required; the packets themselves are not encrypted
v3 noauth	Access allowed to SNMP Version 3 managers; no authentication required (insecure)
v3 priv	Access allowed to SNMP Version 3 managers; cryptographic authentication required; the packets are encrypted

mode view

The mode in which access is granted, followed by the name of the view to which the privileges apply. mode may be either read (read-only access), write (write-only access), or notify (access to traps and notifications). Cisco recommends against using the notify option; use the snmp-server host command to control trap destinations. In one command, you can specify a read view, a write view, and a notify view. If you don’t specify ...