Alcatel-Lucent 7450 - Page 306

SNMP Security Commands
Page 306 7450 ESS System Mangement Guide
lockout minutes2 — The lockout period in minutes where the host is not allowed to login.
When the host exceeds the attempted count times in the specified time, then that host is locked
out from any further login attempts for the configured time period.
Default 10
Values 0 — 1440
community
Syntax community community-string [hash | hash2] access-permissions [version SNMP-version]
[src-access-list list-name]
no community community-string [hash | hash2]
Context config>system>security>snmp
Description This command creates SNMP community strings for SNMPv1 and SNMPv2c access. This command
is used in combination with the predefined access groups and views. To create custom access groups
and views and associate them with SNMPv1 or SNMPv2c access use the usm-community
command.
When configured, community implies a security model for SNMPv1 and SNMPv2c only.
For SNMPv3 security, the access group command on page 304 must be configured.
The no form of the command removes a community string.
Default none
Parameters community-string — Configure the SNMPv1 and/or SNMPv2c community string.
Values community-string — 32 characters maximum
hash-key — 33 characters maximum
hash2-key — 96 characters maximum
hash | hash2 — Configures the hashing scheme for community-string. Hash specifies that the key is
entered in an encrypted form. If the hash parameter is not used, the key is assumed to be in a
non-encrypted, clear text form. For security, all keys are stored in encrypted form. Hash2
specifies that the key is entered in a more complex encrypted form.
access-permissions — •Configures the access permissions for objects in the MIB.
• r — Grants only read access to objects in the MIB, except security objects.
• rw — Grants read and write access to all objects in the MIB, except security.
• rwa — Grants read and write access to all objects in the MIB, including security.
• vpls-mgmt — Assigns a unique SNMP community string to the management virtual router.
version {v1 | v2c | both} — Configures the scope of the community string to be for SNMPv1,
SNMPv2c, or both SNMPv1 and SNMPv2c access.
Default both