附录 A - 安装

A.1. 安装参数

在安装期间, 支持此基于视图的访问控制模型的权威 SNMP 引擎 SHOULD 配置若干初始参数. 对于基于视图的访问控制模型, 这些参数包括:

安全配置

安全配置的选择决定是否实现初始配置, 以及如何实现. 从以下三个可能选项中选择一个:
- initial-minimum-security-configuration
- initial-semi-security-configuration
- initial-no-access-configuration
对于 initial-no-access-configuration, 不存在初始配置, 因而以下步骤无关.
默认上下文

vacmContextTable 中有一个 contextName 为 "" (空字符串) 的条目, 表示默认上下文. 注意, 如果默认上下文存在, 该表会自动创建.

vacmContextName ""
初始组

vacmSecurityToGroupTable 中有一个条目, 用于允许访问组 "initial".

vacmSecurityModel 3 (USM) vacmSecurityName "initial" vacmGroupName "initial" vacmSecurityToGroupStorageType anyValidStorageType vacmSecurityToGroupStatus active
初始访问权限

vacmAccessTable 中包含以下三个条目:
- 对属于组 "initial" 的 securityName, 在 contextName 为 "" 的默认上下文中, 使用 securityModel USM 和 securityLevel "noAuthNoPriv" 对 <restricted> MIB view 进行 read-notify 访问.
- 对属于组 "initial" 的 securityName, 在 contextName 为 "" 的默认上下文中, 使用 securityModel USM 和 securityLevel "authNoPriv" 对 <internet> MIB view 进行 read-write-notify 访问.
- 如果支持隐私, 则对属于组 "initial" 的 securityName, 在 contextName 为 "" 的默认上下文中, 使用 securityModel USM 和 securityLevel "authPriv" 对 <internet> MIB view 进行 read-write-notify 访问.
这转换为 vacmAccessTable 中的以下条目.
- 一个用于未认证访问 (noAuthNoPriv) 的条目:
  
  vacmGroupName "initial" vacmAccessContextPrefix "" vacmAccessSecurityModel 3 (USM) vacmAccessSecurityLevel noAuthNoPriv vacmAccessContextMatch exact vacmAccessReadViewName "restricted" vacmAccessWriteViewName "" vacmAccessNotifyViewName "restricted" vacmAccessStorageType anyValidStorageType vacmAccessStatus active
- 一个用于带可选隐私 (authPriv) 的认证访问 (authNoPriv) 的条目:
  
  vacmGroupName "initial" vacmAccessContextPrefix "" vacmAccessSecurityModel 3 (USM) vacmAccessSecurityLevel authNoPriv vacmAccessContextMatch exact vacmAccessReadViewName "internet" vacmAccessWriteViewName "internet" vacmAccessNotifyViewName "internet" vacmAccessStorageType anyValidStorageType vacmAccessStatus active
两个 MIB view, 其中第二个取决于安全配置.
- 一个用于认证访问的 <internet> view:
  - <internet> MIB view 是以下子树: "internet" (subtree 1.3.6.1)
- 第二个视图是用于未认证访问的 <restricted> view. 该视图根据所选安全配置进行配置:
- 对于 initial-no-access-configuration, 不存在默认初始配置, 因而不预设 MIB view.
- 对于 initial-semi-secure-configuration:
  
  <restricted> MIB view 是这些子树的并集: (a) "system" (subtree 1.3.6.1.2.1.1) [RFC3918] (b) "snmp" (subtree 1.3.6.1.2.1.11) [RFC3918] (c) "snmpEngine" (subtree 1.3.6.1.6.3.10.2.1) [RFC3411] (d) "snmpMPDStats" (subtree 1.3.6.1.6.3.11.2.1) [RFC3412] (e) "usmStats" (subtree 1.3.6.1.6.3.15.1.1) [RFC3414]
- 对于 initial-minimum-secure-configuration:
  
  <restricted> MIB view 是以下子树. "internet" (subtree 1.3.6.1)

这转换为 vacmViewTreeFamilyTable 中以下 "internet" 条目:

                             minimum-secure      semi-secure
                             ----------------    ---------------

vacmViewTreeFamilyViewName "internet" "internet" vacmViewTreeFamilySubtree 1.3.6.1 1.3.6.1 vacmViewTreeFamilyMask "" "" vacmViewTreeFamilyType 1 (included) 1 (included) vacmViewTreeFamilyStorageType anyValidStorageType anyValidStorageType vacmViewTreeFamilyStatus active active

此外, 它转换为 vacmViewTreeFamilyTable 中以下 "restricted" 条目:

                             minimum-secure      semi-secure
                             ----------------    ---------------

vacmViewTreeFamilyViewName "restricted" "restricted" vacmViewTreeFamilySubtree 1.3.6.1 1.3.6.1.2.1.1 vacmViewTreeFamilyMask "" "" vacmViewTreeFamilyType 1 (included) 1 (included) vacmViewTreeFamilyStorageType anyValidStorageType anyValidStorageType vacmViewTreeFamilyStatus active active

vacmViewTreeFamilyViewName "restricted" vacmViewTreeFamilySubtree 1.3.6.1.2.1.11 vacmViewTreeFamilyMask "" vacmViewTreeFamilyType 1 (included) vacmViewTreeFamilyStorageType anyValidStorageType vacmViewTreeFamilyStatus active

vacmViewTreeFamilyViewName "restricted" vacmViewTreeFamilySubtree 1.3.6.1.6.3.10.2.1 vacmViewTreeFamilyMask "" vacmViewTreeFamilyType 1 (included) vacmViewTreeFamilyStorageType anyValidStorageType vacmViewTreeFamilyStatus active

vacmViewTreeFamilyViewName "restricted" vacmViewTreeFamilySubtree 1.3.6.1.6.3.11.2.1 vacmViewTreeFamilyMask "" vacmViewTreeFamilyType 1 (included) vacmViewTreeFamilyStorageType anyValidStorageType vacmViewTreeFamilyStatus active

vacmViewTreeFamilyViewName "restricted" vacmViewTreeFamilySubtree 1.3.6.1.6.3.15.1.1 vacmViewTreeFamilyMask "" vacmViewTreeFamilyType 1 (included) vacmViewTreeFamilyStorageType anyValidStorageType vacmViewTreeFamilyStatus active