Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring Access Control for Communities (SRC CLI)

    An SNMP community string is a text string that functions as a password. SNMP uses the community string to authenticate messages that are transmitted between the SNMP manager and the SNMP agent. The community string is included in every packet that is transmitted between the SNMP manager and the SNMP agent. You can configure SNMP community strings for SNMPv1 and SNMPv2c users only. SNMPv3 users do not use community strings.

    Use the following configuration statements to configure community strings for traditional access control:

    snmp community community { authorization (read-only|read-write); clients clients; oid oid; }

    To configure community strings:

    1. From configuration mode, access the configuration statement that configures the community string. Community names must be unique.
      [edit]user@host# edit snmp community community
    2. (Optional) Specify the authorization level.

      To specify read-only access:

      [edit snmp community community] user@host# set authorization read-only

      To specify read-and-write access:

      [edit snmp community community] user@host# set authorization read-write
    3. Specify the IP address or subnet of the SNMP client hosts that are authorized to use this community.
      [edit snmp community community] user@host# set clients clients

      By default, all clients are allowed.

    4. (Optional) Specify the object identifier used to represent a subtree of MIB objects to which access is allowed.
      [edit snmp community community] user@host# set oid oid
    5. (Optional) Verify your configuration.
      [edit snmp community community] 
      user@host# show 

    Modified: 2014-06-10