Consolidated Platform Configuration Guide, Cisco Ios Release 15.2(4)E (Catalyst 2960-X Switches - Cisco Catalyst 2960 series Configuration Manual

Command or Action
Step 4 access-list access-list-number {deny |
permit} source [source-wildcard]
Example:
Switch(config)# access-list 4 deny
any
Step 5 end
Example:
Switch(config)# end
Step 6
show running-config
Example:
Switch# show running-config
Step 7 copy running-config startup-config
Example:
Switch# copy running-config
startup-config
Purpose
• (Optional) Specify either read-only (ro) if you want authorized
management stations to retrieve MIB objects, or specify read-write (rw)
if you want authorized management stations to retrieve and modify MIB
objects. By default, the community string permits read-only access to
all objects.
• (Optional) For access-list-number, enter an IP standard access list
numbered from 1 to 99 and 1300 to 1999.
(Optional) If you specified an IP standard access list number in Step 3, then
create the list, repeating the command as many times as necessary.
• For access-list-number, enter the access list number specified in Step 3.
• The deny keyword denies access if the conditions are matched. The
permit keyword permits access if the conditions are matched.
• For source, enter the IP address of the SNMP managers that are permitted
to use the community string to gain access to the agent.
• (Optional) For source-wildcard, enter the wildcard bits in dotted decimal
notation to be applied to the source. Place ones in the bit positions that
you want to ignore.
Recall that the access list is always terminated by an implicit deny statement
for everything.
Returns to privileged EXEC mode.
Verifies your entries.
(Optional) Saves your entries in the configuration file.

Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)

How to Configure SNMP
455