Configuring SNMP Communities (NSM Procedure)

You can configure an SNMP community to authorize access to the SNMP server by SNMP clients, based on the source IP address of incoming SNMP request packets. A community also defines which MIB objects are available and the operations (read-only or read-write) allowed on those objects. The SNMP client application specifies an SNMP community name in Get, GetNext, GetBulk, and Set SNMP requests. If a community is not configured, all SNMP requests are denied.

To configure SNMP communities in NSM:

  1. In the navigation tree, select Device Manager > Devices.
  2. In the Devices list, double-click the device to select it.
  3. Click the Configuration tab.
  4. In the configuration tree, expand SNMP.
  5. Select Community.
  6. Click the Add or Edit icon.
  7. Enter the parameters as specified in Table 162.
  8. Click one:
    • OK—To save the changes.
    • Cancel—To cancel the modifications.
    • Apply—To apply the SNMP settings.

Note: After you make changes to a device configuration, you must push that updated device configuration to the physical security device for those changes to take effect. You can update multiple devices at one time. See the Updating Devices section in the Network and Security Manager Administration Guide for more information.

Table 162: Configuring Community Fields

Option

Function

Your Action

Name

Specifies the name of the community.

Enter a name for the community.

Comment

Specifies the comment for the community.

Enter a comment.

View

Specifies the view associated with the community.

Enter a name for the view.

Authorization

Specifies the type of access granted to the community. Access is authorized for SNMP Get, GetBulk, GetNext, and Set requests.

Select an access type for the community:

  • None—No requests are enabled.
  • read-only—Enable Get, GetNext, and GetBulk requests. This option is enabled by default.
  • read-write—Enable all requests, including Set requests.

    You must configure a view to enable Set requests.

Client List Name

Specifies a client list or prefix list to be assigned to an SNMP community.

  1. Expand the Community tree and select Client List Name.
  2. Select a name.

Routing Instance

Specifies a routing instance for a community.

  1. Expand the Community tree and select Routing Instance.
  2. Click the New button or select an entry and click the Edit button.
  3. Configure the following to create and define a routing instance:
    • Name—Enter a name for the routing instance.

      Note: On routers, to configure a routing instance within a logical system, specify the logical system name followed by the routing instance name. Use a slash ( / ) to separate the two names. To configure the default routing instance on a logical system, specify the logical system name followed by “default.”

    • Comment—Enter a comment for the routing instance.

Related Documentation