Cisco IE 4000, Руководство по настройке программного обеспечения

Страница: 539 / 1066

535
Configuring SNMP
How to Configure SNMP
Configuring SNMP Groups and Users
You can specify an identification name (engine ID) for the local or remote SNMP server engine on the switch. You can
configure an SNMP server group that maps SNMP users to SNMP views, and you can add new users to the SNMP group.
Command Purpose
1. configure terminal Enters global configuration mode.
2. snmp-server community string
[ view view-name ] [ ro | rw ]
[ access-list-number ]
Configures the community string.
Note: The @ symbol is used for delimiting the context information. Avoid
using the @ symbol as part of the SNMP community string when
configuring this command.

string —Specifies a string that acts like a password and permits access
to the SNMP protocol. You can configure one or more community
strings of any length.

(Optional) view —Specifies the view record accessible to the
community.

(Optional) Specifies either read-only ( ro ) if you want authorized
management stations to retrieve MIB objects, or specifies read-write
(
rw ) if you want authorized management stations to retrieve and
modify MIB objects. By default, the community string permits
read-only access to all objects.

(Optional) access-list-number —Specifies an IP standard access list
numbered from 1 to 99 and 1300 to 1999.
3. access-list access-list-number
{ deny | permit } source
[ source-wildcard ]
(Optional) If you specified an IP standard access list number in Step 2,
then create the list, repeating the command as many times as necessary.

access-list-number —Specifies the access list number specified in
Step 2.

deny — Denies access if the conditions are matched. The permit
keyword permits access if the conditions are matched.

source —Specifies the IP address of the SNMP managers that are
permitted to use the community string to gain access to the agent.

(Optional) source-wildcard —Specifies the wildcard bits in dotted
decimal notation to be applied to the source. Place ones in the bit
positions that you want to ignore.
The access list is always terminated by an implicit deny statement for
everything.
4. end Returns to privileged EXEC mode.