Dell Brocade DCX, Руководство по настройке, Страница: 1074 / 1436

1002 BigIron RX Series Configuration Guide
53-1001810-01
Establishing SNMP community strings
36
Adding an SNMP community string
When you add a community string, you can specify whether the string is encrypted or clear. By
default, the string is encrypted.
To add an encrypted community string, enter commands such as the following.
BigIron RX(config)# snmp-server community private rw
BigIron RX(config)# write memory
The commands add the read-write SNMP community string “private” and saves it.
Syntax: snmp-server community [0] < string >
ro | rw [view < viewname >] [< standard - acl - name > | < standard-acl-id >]
By default, the community string is encrypted. When you save the new community string to the
startup configuration file, the software adds the following command to the file.
snmp-server community 1 <encrypted-string> rw
If you want to create a non-encrypted community string, use the 0 option. as in the following
example.
BigIron RX(config)# snmp-server community 0 private rw
BigIron RX(config)# write memory
The command in the example above adds the string “private” in the clear, which means the string
is displayed in the clear text form. When you save the community string to the starup configuration
file, the software adds the following command to the file.
snmp-server community 0 private rw
The < string > parameter specifies the community string name. The string can be up to 32
characters long.
The ro | rw parameter specifies whether the string is read-only (ro) or read-write (rw).
The view < viewstring > parameter is optional. It allows you to associate a view to the members of
this community string. Enter up to 32 alphanumeric characters. If no view is specified, access to
the full MIB is granted. The view that you want must exist before you can associate it to a
community string. Here is an example of how to use the view parameter in the community string
command.
BigIron RX(config)# snmp-s community myread ro view sysview
The command in this example associates the view “sysview” to the community string named
“myread”. The community string has read-only access to “sysview”. For information on how create
views, refer to
“Defining SNMP views” on page 1009.
The < standard-acl-name > | < standard-acl-id parameter is optional. It allows you to specify which
ACL will be used to filter incoming SNMP packets. You can enter either the ACL name or its ID. Here
are examples.
BigIron RX(config) # snmp-s community myread ro view sysview 2
BigIron RX(config) # snmp-s community myread ro view sysview myacl
The command in the first example indicates that ACL group 2 will filter incoming SNMP packets,
whereas the command in the second example uses the ACL group called “myacl” to filter incoming
packets. Refer to
“Using ACLs to restrict SNMP access” on page 65 for more information.