Enabling SNMP
To enable the SNMP server, use the following command.
snmp-server
â– Use to enable SNMP server operation.
â– Example
host1(config)#snmp-server
â– Use the no version to disable the SNMP server operation.
â– See snmp-server.
Configuring SNMP v1/v2c Community
For SNMPv1/v2c, access to an SNMP server by an SNMP client is governed by a
proprietary SNMP community table that identifies those communities that have
read-only, read-write, or administrative permission to the SNMP MIB stored on a
particular server.
When an SNMP server receives a request, the server extracts the client’s IP address
and the community name. The SNMP community table is searched for a matching
community. If a match is found, its access list name is used to validate the IP address.
If the access list name is null, the IP address is accepted. A nonmatching community
or an invalid IP address results in an SNMP authentication error.
Each entry in the community table identifies:
â– An SNMP community name
■A user’s privilege level
â– An IP access list
Community Name
The community name acts as a password and is used to authenticate messages sent
between an SNMP client and a router containing an SNMP server. The community
name is sent in every packet between the client and the server.
Privilege Levels
SNMP has three privilege levels:
■Read-only—Read-only access to the entire MIB except for SNMP configuration
objects
■Read-write—Read-write access to the entire MIB except for SNMP configuration
objects
■Admin—Read-write access to the entire MIB
SNMP Configuration Tasks â– 159
Chapter 4: Configuring SNMP