Configuring Community Strings - Cisco Catalyst 2950 Software Configuration Manual

Configuring SNMP

Configuring Community Strings

You use the SNMP community string to define the relationship between the SNMP manager and the
agent. The community string acts like a password to permit access to the agent on the switch. Optionally,
you can specify one or more of these characteristics associated with the string:
•
•
•
Beginning in privileged EXEC mode, follow these steps to configure a community string on the switch:
Command
Step 1 configure terminal
Step 2
snmp-server community string [view
view-name] [ro | rw] [access-list-number]
Step 3 access-list access-list-number {deny |
permit} source [source-wildcard]
Step 4
end
Step 5 show running-config
Step 6 copy running-config startup-config
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
27-8
An access list of IP addresses of the SNMP managers that are permitted to use the community string
to gain access to the agent
A MIB view, which defines the subset of all MIB objects accessible to the given community
Read and write or read-only permission for the MIB objects accessible to the community
Purpose
Enter global configuration mode.
Configure the community string.
For string, specify a string that acts like a password and permits
•
access to the SNMP protocol. You can configure one or more
community strings of any length.
(Optional) For view, specify the view record accessible to the
•
community.
(Optional) Specify either read-only (ro) if you want authorized
•
management stations to retrieve MIB objects, or specify
read-write (rw) if you want authorized management stations to
retrieve and modify MIB objects. By default, the community
string permits read-only access to all objects.
(Optional) For access-list-number, enter an IP standard access list
•
numbered from 1 to 99 and 1300 to 1999.
(Optional) If you specified an IP standard access list number in Step
2, then create the list, repeating the command as many times as
necessary.
For access-list-number, enter the access list number specified in
•
Step 2.
The deny keyword denies access if the conditions are matched.
•
The permit keyword permits access if the conditions are
matched.
• For source, enter the IP address of the SNMP managers that are
permitted to use the community string to gain access to the agent.
(Optional) For source-wildcard, enter the wildcard bits in dotted
•
decimal notation to be applied to the source. Place ones in the bit
positions that you want to ignore.
Recall that the access list is always terminated by an implicit deny
statement for everything.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Chapter 27 Configuring SNMP
78-11380-12