Configuring Access Control for Communities (SRC CLI)
An SNMP community string is a text string that functions as a password. SNMP uses the community string to authenticate messages that are transmitted between the SNMP manager and the SNMP agent. The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent. You can configure SNMP community strings for SNMPv1 and SNMPv2c users only. SNMPv3 users do not use community strings.
Use the following configuration statements to configure community strings for traditional access control:
To configure community strings:
From configuration mode, access the configuration statement that configures the community string. Community names must be unique.
[edit]user@host# edit snmp community community(Optional) Specify the authorization level.
To specify read-only access:
[edit snmp community community]user@host# set authorization read-onlyTo specify read-and-write access:
[edit snmp community community]user@host# set authorization read-writeSpecify the IP address or subnet of the SNMP client hosts that are authorized to use this community.
[edit snmp community community]user@host# set clients clientsBy default, all clients are allowed.
(Optional) Specify the object identifier used to represent a subtree of MIB objects to which access is allowed.
[edit snmp community community]user@host# set oid oid(Optional) Verify your configuration.
[edit snmp community community] user@host# show