Allied Telesis SwitchBlade x3100 Series Manual page 790

Introduction
Associate the community with a set of trusted devices using their IP addresses when creating or adding
•
hosts to the community. If an attempt is made to access the SBx3112 from a device that does not have that
IP address, an authentication trap is produced. (This is controlled with SNMP AUTHENTICATE_TRAP.)
Use the community name, which acts as a trivial password.
•
7.3.3.2 Setting Up an SNMP Community
Setting up an SNMP community involves the following steps:
Enable the SNMP server in the SBx3112 using the ENABLE SNMP command.
1.
Create the SNMP community using the CREATE SNMP COMMUNITY=name command, where "name" is
2.
the community name.
Enable the SNMP community using ENABLE SNMP COMMUNITY=name command. This command allows
3.
the SBx3112 to be accessed by the community.
Set the ACCESS for the community, READ or WRITE. (The default is READ.)
4.
If the community is defined as READ, the user can access any of the supported MIB variables. If the commu-
nity is defined as WRITE, the user can perform set commands as well. Once the community is enabled, it is
possible for a MANAGER device to access the SBx3112; however, traps are still not generated.
If the user plans to reset ATN Enterprise MIB counters or change the cache or SNMP trap filter settings for
an SNMP community, ACCESS for the community must be set to WRITE. If ACCESS is set to READ, the
user will not be able to make these changes or any other changes to the MIB variables for the community.
Caution: When a community is defined with an ACCESS of WRITE, traps from the community include the
community name (the trivial password), which could be seen by unauthorized users.
Enable the SNMP community traps using the ENABLE SNMP COMMUNITY=name TRAP command. The
5.
SBx3112 will now send traps, which include the community name.
7.3.3.3 Disabling an SNMP Community or its Traps
Once a community has been enabled and the sending of traps has been enabled, the user can input the com-
mand:
DISABLE SNMP COMMUNITY=name TRAP
This will disable the ability of the SNMP community to produce traps, but it does not disable the SNMP com-
munity; a MANAGER device can still access the SBx3112.
The user can also disable the SNMP community with the command:
DISABLE SNMP COMMUNITY=name
This will disable the ability of a MANAGER to access the SBx3112, but it will not disable the ability of the com-
munity to produce traps; this must be done with the DISABLE command above that includes TRAP.
7-52
Software Reference for SwitchBlade x3100 Series Switches (Network Management)
Configuring an SNMP Community