Version 8.3.7.0 Introduced on the S4810.
Version 7.6.1.0 Introduced on the S-Series.
Version 7.5.1.0 Introduced on the C-Series.
pre-Version
6.2.1.1
Introduced on the E-Series.
Usage
Information
The Example below configures a community named
public
that is mapped to the security
named
guestuser
with Read Only (ro) permissions.
The security-name parameter maps the community string to an SNMPv3 user/security
name as defined by the community MIB.
If a community string is configured without a security-name (for example, snmp-
server community public ro
), the community is mapped to a default security-name/
group:
• v1v2creadu / v1v2creadg — maps to a community with ro (read-only)
permissions.
• v1v2cwriteu/ v1v2cwriteg — maps to a community with rw (read-write)
permissions.
This command is indexed by the community-name parameter.
If you do not configure the snmp-server community command, you cannot query SNMP
data. Only Standard IPv4 ACL and IPv6 ACL is supported in the optional
access-list-
name.
The command options ipv6, security-name, and access-list-name are recursive.
In other words, each option can, in turn, accept any of the three options as a sub-option, and
each of those sub-options can accept any of the three sub-options as a sub-option, and so
forth. The second Example shows the creation of a standard IPv4 ACL called
snmp-ro-acl
and
then assigning it to the SNMP community
guest
.
NOTE: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP and ICMP rules
are not valid for SNMP. In IPv6 ACLs, port rules are not valid for SNMP.
Example
FTOS#config
FTOS(conf)# snmp-server community public ro
FTOS(conf)# snmp-server community guest ro security-name
guestuser
FTOS(conf)#
Example
FTOS(conf)# ip access-list standard snmp-ro-acl
FTOS(config-std-nacl)#seq 5 permit host 10.10.10.224
FTOS(config-std-nacl)#seq 10 deny any count
!
FTOS(conf)#snmp-server community guest ro snmp-ro-acl
FTOS(conf)#
Related
Commands
ip access-list standard – names (or selects) a standard access list to filter based on IP
address.
ipv6 access-list – configures an access list based on IPv6 addresses or protocols.
show running-config snmp – displays the current SNMP configuration and defaults.
1366
To Next Page
Loading...
