H3C SR6600 Command Reference Manual page 134

Parameters
v1: Specifies SNMPv1.
v2c: Specifies SNMPv2c.
user-name: User name, a case-sensitive string of 1 to 32 characters.
group-name: Group name, a case-sensitive string of 1 to 32 characters.
acl acl-number: Specifies a basic ACL to filter NMSs by source IPv4 address. The acl-number argument
represents a basic ACL number in the range of 2000 to 2999. Only the NMSs with the IPv4 addresses
permitted in the ACL can use the specified username (community name) to access the SNMP agent.
acl ipv6 ipv6-acl-number: Specifies a basic ACL to filter NMSs by source IPv6 address. The
ipv6-acl-number argument represents a basic ACL number in the range of 2000 to 2999. Only the NMSs
with the IPv6 addresses permitted in the ACL can use the specified username (community name) to
access the SNMP agent.
Usage guidelines
Make sure you have created the SNMPv1 or SNMPv2c group.
When you create an SNMPv1 or SNMPv2c user, the system automatically creates a read-only
community that has the same name as the SNMPv1 or SNMPv2c username. To change the access right
of this community to write access, use the snmp-agent community command or the snmp-agent group
{ v1 | v2c } command. To display the SNMPv1 and SNMPv2c communities created in this way, use the
display snmp-agent community command.
The snmp-agent usm-user { v1 | v2c } command enables managing SNMPv1 and SNMPv2c users in the
same way as managing SNMPv3 users. It does not affect the way of configuring SNMPv1 and
SNMPv2c communities on the NMS.
This command is supported only in non-FIPS mode.
Examples
# Add the user userv2c to the SNMPv2c group readCom so an NMS can use the protocol SNMPv2c and
the read-only community name userv2c to access the SNMP agent.
<Sysname> system-view
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom
# Add the user userv2c in the SNMPv2c group readCom so only the NMS at 1.1.1.1 can use the protocol
SNMPv2c and read-only community name userv2c to access the SNMP agent.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0.0.0.0
[Sysname-acl-basic-2001] rule deny source any
[Sysname-acl-basic-2001] quit
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent group v2c readCom
[Sysname] snmp-agent usm-user v2c userv2c readCom acl 2001
Related commands
display snmp-agent community
•
snmp-agent group
•
126