H3C H3C S3600 Series, Руководство по управлению

Страница: 906 / 1277

1-14
Parameters
read : Specifies that the community to be created has read-only permission to MIB objects.
Communities of this type can only query MIBs for device information.
write : Specifies that the community to be created has read-write permission to MIB objects.
Communities of this type are capable of configuring devices.
community-name : Name of the community to be created, a string of 1 to 32 characters.
acl-number : ID of the ACL to be applied to the community, in the range 2000 to 2999. Using basic ACL
can restrict the source addresses of SNMP messages, namely, permitting or refusing the SNMP
messages with specific source addresses, thus restricting access between the NMS and the agent.
view-name : MIB view name, a string of 1 to 32 characters.
Description
Use the snmp - agent community command to create an SNMP community. SNMPv1 and SNMPv2c
use community name to restrict access rights. You can use this command to configure a community
name and configure read or write access right and ACL.
Use the undo snmp - agent community command to remove an SNMP community.
Typically, “public” is used as a read community name, and “private” is used as a write community name.
For the security purposes, you are recommended to configure another community name except these
two.
Examples
# Create an SNMP community named comaccess , which has read-only permission to MIB objects.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] snmp-agent community read comaccess
# Create an SNMP community named mgr , which has read-write permission to MIB objects
[Sysname] snmp-agent community write mgr
# Remove the community named comaccess .
[Sysname] undo snmp-agent community comaccess
snmp-agent group
Syntax
1) Version 1 and version 2c
snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view write-view ]
[ notify-view notify-view ] [ acl acl-number ]
undo snmp-agent group { v1 | v2c } group-name
2) Version 3
snmp-agent group v3 group-name [ authentication | privacy ] [ read-view read-view ] [ write-view
write-view ] [ notify-view notify-view ] [ acl acl-number ]
undo snmp-agent group v3 group-name [ authentication | privacy ]