The Web Management Interface supports only one read-write session at a time. When a read-write
session is open on the Web Management Interface, subsequent sessions are read-only, even if the
session login is “set” with a valid read-write password.
NOTE
If you delete the startup-config file, the device automatically re-adds the default "public" read-only
community string the next time you load the software.
NOTE
As an alternative to the SNMP community strings, you can secure Web management access using
local user accounts or ACLs. Refer to
Security Access
chapter in the
FastIron Ethernet Switch
Security Configuration Guide
.
Encryption of SNMP community strings
The software automatically encrypts SNMP community strings. Users with read-only access or who do
not have access to management functions in the CLI cannot display the strings. For users with read-
write access, the strings are encrypted in the CLI but are shown in the clear in the Web Management
Interface.
Encryption is enabled by default. You can disable encryption for individual strings or trap receivers if
desired. Refer to the next section for information about encryption.
Adding an SNMP community string
The default SNMP community name (string) on a device is "public" with read only privilege.
You can assign other SNMP community strings, and indicate if the string is encrypted or clear. By
default, the string is encrypted.
To add an encrypted community string, enter commands such as the following.
device(config)#snmp-server community private rw
device(config)#write memory
Syntax:
snmp-server community
[
0
|
1
]
string
ro
|
rw
[
view
viewname
] [
standard-ACL-name
|
standard-ACL-id
]
The
string
parameter specifies the community string name. The string can be up to 32 characters long.
The
ro
|
rw
parameter specifies whether the string is r
ead-only (ro)
or
read-write (rw)
.
NOTE
If you issue a
no snmp-server community public ro
command and then enter a
write memory
command to save that configuration, the "public" community name is removed and will have no SNMP
access. If for some reason the device is brought down and then brought up, the "no snmp-server
community public ro" command is restored in the system and the "public" community string has no
SNMP access.
The
0
|
1
parameter affects encryption for display of the string in the running-config and the startup-
config file. Encryption is enabled by default. When encryption is enabled, the community string is
encrypted in the CLI regardless of the access level you are using. In the Web Management Interface,
the community string is encrypted at the read-only access level but is visible at the read-write access
level.
Encryption of SNMP community strings
148
FastIron Ethernet Switch Administration Guide
53-1003625-01