H3C S9500 Series Operation Manual page 527

Operation Manual – QoS/ACL
H3C S9500 Series Routing Switches
Configuration
procedure
Apply the
ACL
control
SNMP
users
Note:
you can apply different ACLs in the snmp-agent community, snmp-agent group
and snmp-agent usm-use commands.
You can only apply number-based basic ACLs to implement ACL control over
SNMP users.
For the detailed description of these commands, refer to the Command Manual.
Apply the snmp-agent
ACL in the {
snmp-agent community-name
community [ mib-view view-name ] [ acl
command acl-number ]
snmp-agent group { v1 |
v2c
[
[ write-view write-view ]
[ notify-view notify-view ]
Apply the
[ acl acl-number ]
ACL in the
snmp-agent
to
snmp-agent
group
group-name
command
[ authentication | privacy ]
[
[ write-view write-view ]
[ notify-view notify-view ]
[ acl acl-number ]
snmp-agent usm-user { v1
|
group-name
acl-number ]
Import the
snmp-agent usm-user v3
ACL into the
user-name
snmp-agent
[
usm-user
{
command
auth-password
[
priv-password
acl-number ]
Chapter 3 Logon User ACL Control Configuration
Command
community
read | write
} group-name
read-view read-view ]
group
read-view read-view ]
v2c } user-name
[
group-name
authentication-mode
md5 | sha
privacy-mode des56
] [
3-7
Description
The SNMP community
name is a feature of
SNMP V1 and SNMP
V2. Applying an ACL in
}
the snmp-agent
community command
filters the
management
based on SNMP V1 and
SNMP V2.
The SNMP group and
user name are features
of SNMP V2 and later.
Applying ACLs in the
v3
snmp-agent
snmp-agent group v3,
snmp-agent usm-user,
and snmp-agent
usm-user
commands filters
network management
systems based
SNMP V2 and later.
If you apply ACLs in
acl
these two groups of
commands
simultaneously,
switch filters
management
}
according to the both
]
features.
acl
network
systems
group,
v3
the
on
the
network
users