3Com 7700 Configuration Manual page 212

204 C 7: Q S/ACL O
HAPTER O
Example: Controlling
SNMP Users with ACL
PERATION
Table 20 Define a Numbered Basic ACL
Operation
Call an ACL when configuring
SNMP username.
The SNMP community-name attribute is a feature of SNMP V1. Therefore, calling
an ACL for SNMP community name configuration can filter the access to SNMP V1
network management system.
The SNMP group-name and username attributes are features of SNMP V2 and
higher. Therefore, calling an ACL for a SNMP community name configuration can
filter the access to the network management system of SNMP V2 or higher. If you
configure ACL control in both commands, the switch filters the network
management users concerning both the features.
Note: You can call different ACLs for these commands. Only the numbered basic
ACL can be called for network management user control.
For more about the commands, see the Switch 7700 Command Reference Guide.
Figure 5 illustrates a configuration that controls SNMP users with ACL.
Figure 5 Control SNMP user with ACL
Internet
Switch
Use the following commands to control SNMP users with ACL.
1 Define the basic ACLs.
[SW7700] acl number 20 match-order config
[SW7700-acl-basic-20] rule 1 permit source 10.110.100.52 0
[SW7700-acl-basic-20] quit
[SW7700] acl number 21 match-order config
[SW7700-acl-basic-21] rule 1 permit source 10.110.100.46 0
[SW7700-acl-basic-21] quit
[SW7700] acl number 22 match-order config
[SW7700-acl-basic-22] rule 1 permit source 10.110.100.55 0
[SW7700-acl-basic-22] quit
2 Call the basic ACLs.
[SW7700] snmp-agent community public read acl 20
[SW7700] snmp-agent group v2c 3comgroup acl 21
[SW7700] snmp-agent usm-user v2c 3comuser 3comgroup acl 22
Command
snmp-agent usm-user { v1 | v2c } user-name group-name [
acl acl-list ]
snmp-agent usm-user v3 user-name group-name [
authentication-mode { md5 | sha } auth-password ] [
privacy des56 priv-password ] [ acl acl-list ]