H3C S5100-SI Series Operation Manual page 82

Operation Manual – Login
H3C S5100-SI/EI Series Ethernet Switches
To do...
Apply the ACL while
configuring the
SNMP community
name
Apply the ACL while
configuring the
SNMP group name
Apply the ACL while
configuring the
SNMP user name
9.3.3 Configuration Example
I. Network requirements
Only SNMP users sourced from the IP addresses of 10.110.100.52 are permitted to log
in to the switch.
II. Network diagram
10.110.100.46
Host A
Host B
10.110.100.52
Figure 9-2 Network diagram for controlling SNMP users using ACLs
Use the command...
snmp-agent community { read |
write } community-name [ acl
acl-number | mib-view view-name ]*
snmp-agent group { v1 | v2c }
group-name [ read-view read-view ]
[ write-view write-view ]
[ notify-view notify-view ] [ acl
acl-number ]
snmp-agent group v3 group-name
[ authentication | privacy ]
[ read-view read-view ] [ write-view
write-view ] [ notify-view
notify-view ] [ acl acl-number ]
snmp-agent usm-user { v1 | v2c }
user-name group-name [ acl
acl-number ]
snmp-agent usm-user v3
user-name group-name [ [ cipher ]
authentication-mode { md5 | sha }
auth-password [ privacy-mode
{ des56 | aes128 } priv-password ] ]
[ acl acl-number ]
IP network
Switch
9-5
Chapter 9 User Control
Remarks
Required
According to the
SNMP version and
configuration
customs of NMS
users, you can
reference an ACL
when configuring
community name,
group name or
username. For the
detailed
configuration, refer to
SNMP-RMON for
more.