328 SNMP CommandsUser Guidelines• The view-name parameter cannot be specified for su, which has access to the whole MIB.• The view-name parameter can be used to restrict the access rights of a community string. When it isspecified:– An internal security name is generated.– The internal security name for SNMPv1 and SNMPv2 security models is mapped to an internalgroup name.– The internal group name for SNMPv1 and SNMPv2 security models is mapped to a view-name(read-view and notify-view always, and for rw for write-view also)• The group-name parameter can also be used to restrict the access rights of a community string. Whenit is specified:– An internal security name is generated.– The internal security name for SNMPv1 and SNMPv2 security models is mapped to the group name.• The no snmp-server community command is used to remove a community or a community group.ExamplesThe following example sets up the community access string "public" to permit administrative access toSNMP protocol, at an administrative station with the IP address 192.168.1.20.snmp-server viewThe snmp-server view Global Configuration mode command creates or updates a view entry. Use the noform of this command to remove the specified Simple Network Management Protocol (SNMP) serverview entry.Syntax• snmp-server view view-name oid-tree {included | excluded}• no snmp-server view view-name [oid-tree]• view-name — Label for the view record that you are updating or creating. The name is used toreference the record. (Range: 1 - 30 characters)• oid-tree — Object identifier of the ASN.1 subtree to be included or excluded from the view. Toidentify the subtree, specify a text string consisting of numbers, such as 1.3.6.2.4, or a word, suchas system. Replace a single subidentifier with the asterisk (*) wildcard to specify a subtree family;for example 1.3.*.4.• included — The view type is included.• excluded — The view type is excluded.Console (config)# snmp-server community public su 192.168.1.205400_CLI.book Page 328 Wednesday, December 17, 2008 4:33 PM
