Add openconfig-snmp YANG model for SNMP configuration and monitoring

[nleiva]

Change Scope

This PR adds a new YANG module openconfig-snmp under release/models/system/
for managing SNMP services on network devices. The model covers community-based
SNMPv1/v2c configuration including:

• Global SNMP settings (contact, location)
• Community definitions with access modes (read-only, read-write)
• Client prefix restrictions per community
• Trap/notification receivers
• Notification event filtering (authentication, line-status, etc.)

SNMPv3 is explicitly out of scope for this module.

The module is imported by openconfig-system.yang under the system hierarchy.

Platform Implementations

• Implementation A: SNMPv1/v2c Configuration
• Implementation C: SNMP Configuration Guide, Cisco IOS XE 17

Tree View

module: openconfig-system
  +--rw system
     ...
     +--rw snmp
        +--rw config
        |  +--rw contact?    string
        |  +--rw location?   string
        +--ro state
        |  +--ro contact?    string
        |  +--ro location?   string
        +--rw communities
        |  +--rw community* [name]
        |     +--rw name            -> ../config/name
        |     +--rw config
        |     |  +--rw name?          string
        |     |  +--rw access-mode?   snmp-access-mode
        |     |  +--rw version?       snmp-version
        |     +--ro state
        |     |  +--ro name?          string
        |     |  +--ro access-mode?   snmp-access-mode
        |     |  +--ro version?       snmp-version
        |     +--rw managers
        |     |  +--rw manager* [prefix]
        |     |     +--rw prefix    -> ../config/prefix
        |     |     +--rw config
        |     |     |  +--rw prefix?   oc-inet:ip-prefix
        |     |     +--ro state
        |     |        +--ro prefix?   oc-inet:ip-prefix
        |     +--rw access-lists
        |        +--rw access-list* [name type]
        |           +--rw name      -> ../config/name
        |           +--rw type      -> ../config/type
        |           +--rw config
        |           |  +--rw name?   -> /oc-acl:acl/acl-sets/acl-set/config/name
        |           |  +--rw type?   -> /oc-acl:acl/acl-sets/acl-set[oc-acl:name=current()/../name]/config/type
        |           +--ro state
        |              +--ro name?   -> /oc-acl:acl/acl-sets/acl-set/config/name
        |              +--ro type?   -> /oc-acl:acl/acl-sets/acl-set[oc-acl:name=current()/../name]/config/type
        +--rw notifications
           +--rw config
           |  +--rw event-type*   identityref
           +--ro state
           |  +--ro event-type*   identityref
           +--rw receivers
              +--rw receiver* [name]
                 +--rw name      -> ../config/name
                 +--rw config
                 |  +--rw name?                string
                 |  +--rw address?             oc-inet:ip-address
                 |  +--rw port?                oc-inet:port-number
                 |  +--rw version?             snmp-version
                 |  +--rw community?           string
                 |  +--rw notification-type?   snmp-notification-type
                 |  +--rw event-type*          identityref
                 +--ro state
                    +--ro name?                    string
                    +--ro address?                 oc-inet:ip-address
                    +--ro port?                    oc-inet:port-number
                    +--ro version?                 snmp-version
                    +--ro community?               string
                    +--ro notification-type?       snmp-notification-type
                    +--ro event-type*              identityref
                    +--ro notifications-sent?      yang:counter64
                    +--ro notifications-dropped?   yang:counter64

[gemini-code-assist]

Code Review

This pull request introduces the openconfig-snmp module for community-based SNMP configuration and state, integrating it into the system model. Feedback identifies that the snmp-top grouping is not yet instantiated in the system container and that the access-list reference is ambiguous because it lacks the ACL type required for the composite key. Suggestions were also made to use oc-inet:port-number with a default value for notification ports and to add must statements to prevent combining the 'ALL' event type with specific identities.

[ElodinLaarz]

/gcbrun

[OpenConfigBot]

No major YANG version changes in commit c4f24eb

[dplore]

/gcbrun

[navaneethyv]

/gcbrun

[navaneethyv]

Discussed on June 2nd , moving to the last call