l
To allow a specified NM station that uses the community name to manage specified objects
of the device, follow the procedure described in
Controlling the NM Station's Access to
.
l
To allow a specified module on the managed device to report alarms to the NM station,
follow the procedure described in
3.3.2 (Optional) Controlling the NM Station's Access to the Device
This section describes how to specify an NM station and manageable MIB objects for SNMP
based communication between the NM station and managed device to improve communication
security.
Context
If a device is managed by multiple NM stations that use the same community name, note the
following points:
l
If all the NM stations need to have rights to access the objects in the Viewdefault view,
skip the following steps.
l
If some of the NM stations need to have rights to access the objects in the Viewdefault
view, skip
l
If all the NM stations need to manage specified objects on the device, skip
, and
l
If some of the NM stations need to manage specified objects on the device, perform all the
following steps.
Procedure
Step 1
Run:
system-view
The system view is displayed.
Step 2
Run:
acl
acl-number
A basic ACL is created to filter the NM station users to manage the device.
Step 3
Run:
rule
[
rule-id
] {
deny
|
permit
}
source
{
source-ip-address
source-wildcard
|
any
}
A rule is added to the ACL.
Step 4
Run:
commit
The configuration is committed.
Step 5
Run:
quit
Return to the system view.
Step 6
Run:
HUAWEI NetEngine5000E Core Router
Configuration Guide - System Management
3 SNMP Configuration
Issue 01 (2011-10-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
68
