Optional) Controlling The Nm Station's Access To The Device - Huawei Quidway S5700 Series Configuration Manual - Network Management

Quidway S5700 Series Ethernet Switches
Configuration Guide - Network Management
l

1.2.3 (Optional) Controlling the NM Station's Access to the Device

This section describes how to specify an NM station and manageable MIB objects for SNMP-
based communication between the NM station and managed device to improve communication
security.
Context
If a device is managed by multiple NM stations that use the same community name, note the
following points:
l
l
l
l
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
acl acl-number
A basic ACL is created to filter the NM station users that can manage the device.
Step 3 Run:
rule [ rule-id ] { deny | permit } source { source-ip-address source-wildcard |
any }
A rule is added to the ACL.
Step 4 Run:
quit
Return to the system view.
Step 5 Run:
snmp-agent mib-view { excluded | included } view-name oid-tree
A MIB view is created, and manageable MIB objects are specified.
By default, an NM station has rights to access the objects in the Viewdefault view (1.3.6.1).
l If a few MIB objects on a device or some objects in the current MIB view do not or no longer
Issue 01 (2011-10-26)
If the functions such as accounting and fault location need to be bound to specified
interfaces to prevent changes in interface indexes during device or interface restart, follow
the procedure described in
If all the NM stations that use the community name need to have rights to access the objects
in the Viewdefault view (1.3.6.1), skip the following steps.
If some of the NM stations that use the community name need to have rights to access the
objects in the Viewdefault view (1.3.6.1), skip Step 5.
If all the NM stations need to manage specified objects on the device, skip Steps 2, 3, and
4.
If some of the NM stations that use the community name need to manage specified objects
on the device, perform all the following steps.
need to be managed by the NM station, excluded needs to be specified in the related command
to exclude these MIB objects.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Configuring the Constant Interface Index
1 SNMP Configuration
Feature.
11