IP Access List
The IP access list identifies those IP addresses of SNMP clients permitted to use a
given SNMP community.
snmp-server community
■ Use to configure an authorized SNMP community for access to the SNMP MIBs
and to associate SNMPv1/v2c communities with SNMP MIB views.
■ The community name serves as a password and permits access to an SNMP
server. The name can be up to 31 characters, and it must be enclosed in quotation
marks.
■ The maximum number of communities in each virtual router is 32.
■ By default, an SNMP community permits only read-only access.
■ The view name allows configuration with available dynamic views.
■ Example
host1(config)#snmp-server community “ boston” view view1 rw
■ Use the no version to delete a community from the SNMP community table.
■ See snmp-server community.
Configuring SNMPv3 Users
To configure SNMPv3 users, use the following command.
snmp-server user
■ Use to create and modify SNMPv3 users.
■ Example
host1(config)#snmp-server user fred auth sha fred-password priv des password
group user
■ Use the no version to delete users.
■ See snmp-server user.
Configuring SNMP Dynamic Groups and Views
With dynamic configurable views and groups you can fine-tune application features
to a specific group, You can have 32 view entries (with distinct names) per virtual
router. Because there is no limit to the number of entries within a distinct view name,
you can configure complex views. You can also have 32 access entries (with distinct
names) per virtual router. All views are on a per-virtual-router basis; although static
views are on a per-virtual-router basis, they cannot be altered. If you modify a view,
the system deletes the original entry and creates the new view. Therefore, if the new
view fails, the original view is no longer available.
160 ■ SNMP Configuration Tasks
JUNOSe 11.1.x System Basics Configuration Guide