nmcfg
The nmcfg (Network Management Configuration) command is used by system administrators or GUI/Web interface applications in the configuration of SNMP for certain Makito X series devices. The nmcfg script reads and edits the standard SNMP configuration files, and then restarts the SNMP agent (snmpd) to apply the new settings.
The nmcfg script supports the configuration of v1/v2c community-based security model and v3 USM (User-based Security Model). The script supports the traditional access permissions (read-only, read-write) and VACM (View-based Access Control Model) views modeling the Makito X user groups (administrator, operator, and guest).
A detailed help, describing the options is available for each command option (for example, nmcfg access help or nmcfg user help).
Synopsis
nmcfg helpnmcfg community helpnmcfg system helpnmcfg user help |
Options
| Name | Description |
|---|---|
access | Defines the access permissions granted to the v1/v2c communities and USM (v3) users. Only the USM security model option is shown in the summary help. The v2c security model, a different format for community configuration, is only displayed in the access detailed help. Note that the v2c security model also applies to SNMP v1. |
community | Defines community-based (v1v/2c) security configuration for the Makito X. |
system | Defines contact and location system parameters. |
user | Defines user-based (v3) security configuration for the Makito X. |
Actions
| Action | Description |
|---|---|
define | Acts as both create and update. If an object does not exist, it is added. If it exists, it is replaced or updated with the new settings. It is then not necessary to delete an existing object to change its settings. All required settings of an object are specified when defining/changing an object. It is not possible to set settings individually. |
permit | Defines the access permissions for the community or the user. Info Access permissions may be additive. For example, permitting a new source for an existing community adds to the existing one if it complements it. |
delete | Deletes the specified object. |
help | Displays usage information for the command, or if specified, the option. |
Note
nmcfg settings persist after reboots, unlike other Makito X settings which are lost when the unit is rebooted unless saved as a configuration.
Parameters
N/A
Example #1: Initializing a Community-Based (v1/v2c) System
In the example below, a system with default settings is configured to add a distant host access (198.51.100.122) to the existing localhost and localnet accesses of the admin community. Note that the localnet source is a special keyword that translates at runtime to the network settings of the LAN interface. System parameters are also defined. Both IPv4 and IPv6 are enabled. # nmcfgsystem parameter valuemodel perm/group level user/community af source# nmcfg system define contact "myname <myname@example.org>"# nmcfg system define location "Media Lab"# nmcfg community permit admin rw 198.51.100.122 |
Example #2: Creating an SNMPv3 User
Two commands are required to create a USM (v3) user and define its access: # nmcfg user define johnsmith SHA "arfds23dsjs" AES "2394urscxkvn" |
Example #3: Initializing a USM-only (SNMPv3) System
In the example below, system security is enforced by completely disabling SNMPv1/v2c access, and by requiring v3 USM authentication only for users group-based access, and encryption for admins and operators group-based access. Both IPv4 and IPv6 are enabled. # nmcfg model perm/group level user/community af source # nmcfg agent stop # nmcfg system define contact "joe net <jnet@example.org>" # nmcfg system define location "Media Lab" # nmcfg community delete admin # nmcfg community delete public # nmcfg user define joenet SHA "arfds23dsjs" AES "2394urscxkvn" # nmcfg user define johnsmith SHA "89ss5dkj" AES "jfdsf78998sd" # nmcfg user define guest MD5 "nososecret" # nmcfg access usm permit joenet administrator priv # nmcfg access usm permit johnsmith operator priv # nmcfg access usm permit guest guest # nmcfg agent start # nmcfg system parameter value model perm/group level user/community af source auth protocol priv protocol user |
Related Topics