Juniper JUNOSE 11.3, Configuration Manual

Page: 179 / 632

host1(config)# snmp-server
•
Use the no version to disable the SNMP server operation.
•
See snmp-server.
Configuring SNMP v1/v2c Community
For SNMPv1/v2c, access to an SNMP server by an SNMP client is governed by a proprietary
SNMP community table that identifies those communities that have read-only, read-write,
or administrative permission to the SNMP MIB stored on a particular server.
When an SNMP server receives a request, the server extracts the client’s IP address and
the community name. The SNMP community table is searched for a matching community.
If a match is found, its access list name is used to validate the IP address. If the access
list name is null, the IP address is accepted. A nonmatching community or an invalid IP
address results in an SNMP authentication error.
Each entry in the community table identifies:
•
An SNMP community name
•
A user’s privilege level
• An IP access list
Community Name
The community name acts as a password and is used to authenticate messages sent
between an SNMP client and a router containing an SNMP server. The community name
is sent in every packet between the client and the server.
Privilege Levels
SNMP has three privilege levels:
• Read-only—Read-only access to the entire MIB except for SNMP configuration objects
•
Read-write—Read-write access to the entire MIB except for SNMP configuration objects
•
Admin—Read-write access to the entire MIB
IP Access List
The IP access list identifies those IP addresses of SNMP clients permitted to use a given
SNMP community.
snmp-server community
•
Use to configure an authorized SNMP community for access to the SNMP MIBs and
to associate SNMPv1/v2c communities with SNMP MIB views.
•
The community name serves as a password and permits access to an SNMP server.
The name can be up to 31 characters, and it must be enclosed in quotation marks.
•
The maximum number of communities in each virtual router is 32.
•
By default, an SNMP community permits only read-only access.
149 Copyright © 2010, Juniper Networks, Inc.
Chapter 4: Configuring SNMP