SNMP Group, User and Inform Setting

[jon_panes24]

Hi,

Im somewhat confused with the SNMP Group and User settings.

For example you can create a SNMP group with a noauth setting and you can tie that group to a user that has authpriv settings

snmp-server group group-noauth v3 noauth
snmp-server user user1 group-noauth v3 auth md5 cisco priv 3des cisco 

You can also reference that user belonging to a NoAuth group with SNMP Informs/traps that require authpriv

snmp-server host 192.168.1.1 version 3 priv user1 cpu 

How does the order of operations here work?

[pieterh]

it's not really that confusing
your configured user user1 has the ability to use snmp with multiple authentication methods
- authpriv
- auth (nopriv)
- noauth
an account can be member of multiple groups
depending on the need of the snmp-server group

you can create a group that has only snmp-read rights with noauth
and another group that has snmp-write ricghts with authpriv