Network Critical SmartNA-X User Manual page 170

C L I R
OMMAND INE NTERFACE EFERENCE
SNMP
CREATE COMMUNITY
Use the snmp create community command to create the community secret used in SNMP v1/v2c get and set
requests. A community secret authenticates messages between a management station and an SNMP v1/v2c engine.
Optionally, you can specify one or more of these characteristics associated with the community secret:
• Read and write or read-only permission for the MIB objects accessible to the community
• A list of object identifiers (OIDs) that are accessible to the community
• An access list of IP addresses of the SNMP managers that are permitted to use the community secret to gain
access to the agent
• The IP version permitted to access the MIB objects accessible to the community
Note that community secrets are exchanged in clear text (unencrypted) and are therefore not secure. For better
security, consider implementing SNMPv3 and VACM instead.
SNMP SNMPv1, SNMPv2c
Command form snmp create community communitySecret [
communitySecret
[ |
ro rw
[ OID]
oid
[source
[
IP_V4
Examples • Create a read-write community that accepts requests from all sources on all MIBS:
CONTROLLER>snmp create community mysecret
• Create a read-only community which accepts get requests from all sources on all MIBS
CONTROLLER>snmp create community mysecret ro
|
Specifies a community secret that acts like a password and permits access to the
SNMP protocol. The following restrictions apply to the community secret:
• maximum of 32 alpha-numeric characters (case sensitive)
• no spaces, punctuation or other special characters
• first character must be a letter
] (Optional) Specifies read-only or read-write (the default) access for the community.
Use if you want the community to be able to retrieve the value of MIB objects but
ro
not be able to change values. Use
and write MIB objects. Default:
(Optional) Restricts access to the subtree rooted at the specified OID(s). If you do
not specify this option, the community will have access to all the OID tree. Default:
.1
source] (Optional) Restricts access from the specified source address, subnet or hostname.
For source, specify either a hostname or IP address, or a subnet, represented as IP/
MASK (e.g. 10.10.10.0/255.255.255.0), or IP/BITS (e.g. 10.10.10.0/24), or the
IPv6 equivalent.
| ] (Optional) Restricts access to sources using IPv4 or IPv6. Default:
IP_V6
S NA™ 10G N
MART
| ] [ OID] [ source] [
ro rw oid source
if you want the community to be able to read
rw
rw
DRAFT
A (S NA-X)
ETWORK CCESS MART
| ]
IP_V4 IP_V6
IP_v4
165