81
read and write community name. To improve security, assign your SNMP communities a name other than
public
and
private
.
To make sure that the MIB objects are accessible only to a specific NMS, use a basic ACL to identify the
source IP address of the NMS. To set the range of the MIB objects available for the community, use a MIB
view.
Related commands:
snmp-agent mib-view
.
Examples
# Create a read-only community and name it
readaccess
.
<Sysname> system-view
[Sysname] snmp-agent sys-info version v1 v2c
[Sysname] snmp-agent community read readaccess
•
Set the SNMP version on the NMS to SNMPv1 or SNMPv2c
•
Fill in the read-only community name
readaccess
•
Establish a connection, and the NMS can perform read-only operations to the MIB objects in the
default MIB view (
ViewDefault
) on the device
# Create a read and write community and name it
writeaccess
. Enable only the NMS with the IP address
of 1.1.1.1 in this community to update the values of the agent MIB objects.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0.0.0.0
[Sysname-acl-basic-2001] rule deny source any
[Sysname-acl-basic-2001] quit
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent community write writeaccess acl 2001
•
Set the IP address of the NMS to 1.1.1.1.
•
Set the SNMP version on the NMS to SNMPv2c.
•
Fill in the write community name
writeaccess
; namely, the NMS can perform read-only operations
to the MIB objects in the default MIB view (
ViewDefault
) on the device.
# Create a read and write community and name it
wr-sys-acc
. The NMS can perform the read and write
operations to the MIB objects of the system subtree (with the OID of 1.3.6.1.2.1.1).
<Sysname> system-view
[Sysname] snmp-agent sys-info version v1 v2c
[Sysname] undo snmp-agent mib-view ViewDefault
[Sysname] snmp-agent mib-view included test system
[Sysname] snmp-agent community write wr-sys-acc mib-view test
•
Set the SNMP version on the NMS to SNMPv1 or SNMPv2c.
•
Fill in the write community name
wr-sys-acc
.
•
Establish a connection, and the NMS can perform read and write operations to the MIB objects in
system view on the device.
snmp-agent group
Syntax
SNMPv1 and SNMP v2c: