Configuring Acl For Snmp Users; Defining Acl; Importing Acl - Huawei Quidway S6500 Series Operation Manual

Operation Manual - QoS/ACL
Quidway S6500 Series Ethernet Switches

3.3 Configuring ACL for SNMP Users

Huawei Quidway series Ethernet switches support remote network management (NM)
and the user can use SNMP to access them. Proper ACL configuration can prevent
illegal users from logging onto the switches.
Two steps are included in this configuration:
1) Define an ACL
2) Import the ACL to control SNMP users

3.3.1 Defining ACL

Currently only number-based ACLs can be imported, with the number ranging from
2000 to 2999. See 3.3.1 Defining ACL for detailed configuration.

3.3.2 Importing ACL

Import the defined ACL into the commands with SNMP community, username and
group name configured, to achieve ACL control over SNMP users.
Please perform the following configurations in system view.
Table 3-4 Importing ACL
Operation
Import
ACL
commands
SNMP
configured
Import
ACL
commands
SNMP group name
configured
Import
ACL
commands
SNMP
configured
SNMP community is one of the features of SNMP v1 and SNMP v2, so you import the
ACL into the commands with SNMP community configured, for the SNMP V1 and
SNMP V2.
the defined
into the
snmp-agent community { read | write } community-name
with
[ [ mib-view view-name ] | [ acl acl-number ] ]*
community
snmp-agent group { v1 | v2c } group-name [ read-view
the defined
read-view ] [ write-view write-view ] [ notify-view
into the
notify-view ] [ acl acl-number ]
with
snmp-agent group v3 group-name [ authentication |
privacy ] [ read-view read-view ] [ write-view write-view ]
[ notify-view notify-view ] [ acl acl-number ]
snmp-agent usm-user { v1 | v2c } user-name group-name
the defined
[ acl acl-number ]
into the
with
snmp-agent
username
[ authentication-mode { md5 | sha } auth-password
privacy-mode des56 priv-password ] [ acl acl-number ]
Huawei Technologies Proprietary
Command
usm-user v3
3-4
Chapter 3 ACL Configuration
user-name group-name