After clicking on the Edit icon or Add User button, the following properties of the view (vacmViewTreeFamilyTable) can be edited on the page that appears, as shown in Figure 5:

Figure 5. Add View Screen

Name: Represents the name of the view. Multiple views can have the same name.

Type: Select the type of the view from the combo box. Available options are: 'included' and 'excluded'. Each view subtree in the MIB view is specified as being included or excluded. That is, the MIB view either includes or excludes all object instances contained in that subtree.

Subtree: This field defines the subtree Object ID. A subtree is a node in the MIB's naming hierarchy including all of its subordinate elements.

Mask: View mask is a list of '0' or '1', separated by '.' or ':'. View mask is defined in order to reduce the amount of configuration information required when fine-grained access control is required. Each bit of this bit mask specifies whether or not the corresponding sub-identifiers must match when determining if an OBJECT IDENTIFIER is in this family of view subtrees; a '1' indicates that an exact match must occur; a '0' indicates 'wild card', that is, any sub-identifier value matches.

After clicking on the Edit icon or Add Group button, the following access rights of the group can be edited on the page that appears, as shown in Figure 6:

Figure 6. Add Group Screen

Name: Represents the SNMPv3 group's name.

Security Level: The level of security at which SNMP messages can be sent, or the level of security at which operations are being processed. There are three security levels for SNMPv3 groups:

Select one of the security levels from the combo box.

Match: If the value of this object is exact, then only rows where the contextName exactly matches Context Prefix are selected. If the value of this object is prefix, then all rows with a contextName whose starting octets match the Context Prefix are selected. This allows for a simple form of wildcarding.

Context Prefix: In order to gain the access rights allowed by this conceptual row, a contextName must match exactly (if Match is exact) or partially (if the value of Match is prefix) to the value of the instance of this object.

Read View: The view associated with this group for READ operations, such as GET, GETNEXT, GETBULK.

Write View: The view associated with this group for WRITE operations, such as SET.

Notify View: The view associated with this group for notification operations.

After clicking on the Edit icon or Add User button, the following properties of the user can be edited on this page, as shown in Figure 7:

Figure 7. Add User Screen

Name: Represents the SNMPv3 user's name.

Group: Displays the group to which the user belongs. A user's security level is determined by the security level of its group, not by the values of Authentication Password and Private Password. If the security level is authNoPriv, the Private Password field's value will be ignored. The preferred group can be selected from the combo box.

Authentication: The authentication algorithm can be selected from the combo box. Two algorithms are supported: MD5 and SHA.

Authentication Password: Type the authentication password of the user in the provided text box.

Confirm Authentication Password: Retype the above-entered password into this field for confirmation.

Privacy: The privacy service encryption and decryption algorithm can be selected from this combo box. There are two supported algorithms: DES and AES.

Privacy Password: Type in the privacy password of the user.

Confirm Privacy Password: Retype the above-entered password into this field for confirmation.

After clicking on the Edit icon or Add Trap Sink button, the following properties of the trap receiver can be edited on the page that appears, as shown in Figure 8.

Figure 8. Add Trap Sink Screen

Hostname: This field should contain the host name or IP address of the trap receiver.

Port: Represents the port number of the trap receiver. The default value is 162.

User Name: One of user names in the trap receiver's user list.

Authentication: The authentication algorithm can be selected form the combo box. There are two supported algorithms: MD5 and SHA.

Authentication Password: Type the authentication password in the provided text box.

Confirm Authentication Password: Retype the above-entered password into this field for confirmation.

Privacy: The privacy service encryption and decryption algorithm can be selected from this combo box. There are two supported algorithms: DES and AES.

Privacy Password: Type in the privacy password.

Confirm Privacy Password: Retype the above-entered password into this field for confirmation.

Is Inform: This field can determine whether the SNMP INFORM request is sent instead of a trap to the trap receiver(s). In order to use the INFORM request tick the relevant check box.

Note

A trap sink's security level is determined by the Authentication Password and Privacy Password. If both of them are empty strings, security level is noAuthNoPriv (without authentication and without privacy). If Privacy Password is an empty string, security level is authNoPriv (with authentication but without privacy). If both of them are non-empty strings, security level is authPriv (with authentication and with privacy).