18-5
Catalyst 3550 Multilayer Switch Software Configuration Guide
78-11194-03
Chapter18 Configuring SNMP Configuring SNMP
Disabling the SNMP Agent
Beginning in privileged EXEC mode, follow these steps to disable the SNMP agent:
No specific IOS command exists to enable SNMP . The first snmp-server global configuration command
that you enter enables SNMPv1 and SNMPv2.
Configuring Community Strings
You use the SNMP community string to define the relationship between the SNMP mana ger a nd the
agent. The community string acts like a password to permit access to the agent on the switch. Optionally,
you can specify one or more of these characteristics associated with the string:
An access list of IP addresses of the SNMP managers that are permitted to use the commun ity strin g
to gain access to the agent
A MIB view, which defines the subset of all MIB objects accessible to the given co mmuni ty
Read and write or read-only permission for the MIB objects ac cessibl e t o th e c omm unit y
Beginning in privileged EXEC mode, follow these steps to configure a community string on the switch:
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 no snmp-server Disable the SNMP agent operation.
Step3 end Return to privileged EXEC mode.
Step4 show running-config Verify your entries.
Step5 copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
Step1 configure terminal Enter global config urati on mode.
Step2 snmp-server community string [ro | rw]
[access-list-number]Configure the community string.
For string, specify a string that acts like a password and
permits access to the SNMP protocol. You can configure one
or more community strings of any length.
(Optional) Specify either read-only (ro) if you want
authorized management stations to retrieve MIB objects, or
specify read-write (rw) if you want authorized management
stations to retrieve and modify MIB objects. By default, the
community string permits read-only access to all objects.
(Optional) For access-list-number, enter an IP standard access
list numbered from 1 to 99 and 1300 to 1999.