Dell Force10 MXL Blade - Page 583

Simple Network Management Protocol (SNMP) and Syslog | 583
Parameters
Defaults
none
Command Modes
CONFIGURATION
Command
History
Usage
Information
Figure 31-6 configures a community named guest that is mapped to the security named guestuser
with Read Only (ro) permissions.
Example
Figure 31-6. snmp-server community Command Example
The security-name parameter maps the community string to an SNMPv3 user/security name as
defined by the community MIB.
If a community string is configured without a security-name (for example, snmp-server community
public ro
), the community is mapped to a default security-name/group:
• v1v2creadu / v1v2creadg — maps to a community with ro permissions
• v1v2cwriteu/ v1v2cwriteg — maps to a community with rw permissions
This command is indexed by the community-name parameter.
If you do not configure the snmp-server community command, you cannot query SNMP data. Only
Standard IPv4 ACL is supported in the optional access-list-name.
The command options security-name and access-list-name are recursive. In other words, each option
can, in turn, accept any of the three options as a sub-option, and each of those sub-options can accept
any of the three sub-options as a sub-option, and so forth. Figure 31-7 shows the creation of a standard
IPv4 ACL called “snmp-ro-acl” and then assigning it to the SNMP community “guest”:
Example
Figure 31-7. snmp-server community Command Example
community-name
Enter a text string (up to 20 characters long) to act as a password for SNMP.
ro Enter the keyword ro to specify read-only permission.
rw Enter the keyword rw to specify read-write permission.
security-name name
(OPTIONAL) Enter the keyword security-name followed by the security
name as defined by the community MIB.
access-list-name
(OPTIONAL) Enter a standard IPv4 access list name (a string up to 16
characters long).
Version 8.3.16.1 Introduced on MXL 10/40GbE Switch IO Module
FTOS#config
FTOS(conf)# snmp-server community guest ro
FTOS(conf)# snmp-server community guest ro security-name guestuser
FTOS(conf)#
FTOS(conf)# ip access-list standard snmp-ro-acl
FTOS(conf-std-nacl)#seq 5 permit host 10.10.10.224
FTOS(conf-std-nacl)#seq 10 deny any count
!
FTOS(conf)#snmp-server community guest ro snmp-ro-acl
FTOS(conf)#