3Com SuperStack 4 Configuration Manual page 217

Configuring ACL for
SNMP Users
2 Import the ACL.
[SW5500]user-interface vty 0 4
[SW5500-ui-vty0-4]acl 2000 inbound
The Switch 5500G-EI Family supports remote network management (NM) and the
user can use SNMP to access them. Proper ACL configuration can prevent illegal
users from logging onto the Switches.
Two steps are included in this configuration:
1 Define an ACL
2 Import the ACL to control SNMP users
Defining ACL
Currently only number-based ACLs can be imported, with the number ranging
from 2000 to 2999. See
Importing ACL
Import the defined ACL into the commands with SNMP community, username and
group name configured, to achieve ACL control over SNMP users.
Perform the following configurations in System View.
Table 257 Importing ACL
Operation
Import the defined ACL into
the commands with SNMP
community configured
Import the defined ACL into
the commands with SNMP
group name configured
Import the defined ACL into
the commands with SNMP
username configured
SNMP community is one of the features of SNMP v1 and SNMP v2, so you import
the ACL into the commands with SNMP community configured, for the SNMP V1
and SNMP V2.
SNMP username or group name is one of the features of SNMP V2 and above,
therefore you import the ACL into the commands with SNMP username or group
name configured, for the SNMP V2 and above. If you import the ACL into both
features, the Switch will filter both features for the users.
You can import different ACLs in the three commands listed above.
"Defining ACL " on page 207
Command
snmp-agent community { read | write }
community_name
[ [ mib-view
acl acl_number ] ]*
snmp-agent group { v1 | v2c }
read_view
read-view
write_view
] [ notify-view
acl acl-number ]
snmp-agent group v3
authentication | privacy ] [ read-view
read_view ] [ write-view
notify-view notify_view
snmp-agent usm-user { v1 | v2c }
group_name
[ acl
snmp-agent usm-user v3
[ authentication-mode { md5 | sha }
auth_password ] [ privacy-mode des56
priv_password ] [ acl
ACL Control Configuration
for detailed configuration.
view_name
group_name
] [ write-view
notify_view
group_name
[
write_view
] [ acl acl_number
user_name
acl_number
]
user_name group_name
acl_number ]
229
] | [
[
] [
] [
]