24-8
Catalyst 2950 Desktop Switch Software Configuration Guide
78-14982-01
Chapter 24 Configuring SNMP
Configuring SNMP
Note To disable access for an SNMP community, set the community string for that community to the null
string (do not enter a value for th e communi ty string ).
To re move a specif ic community string, use the no snmp-server community string global configuration
comm an d.
This example shows how to assign the string comaccess to SNMP, to allow read-only access, and to
specify that IP access list 4 can use the community string to gain access to the switch SNMP agent:
Switch(config)# snmp-server community comaccess ro 4

Configur ing SNMP Grou ps an d Us ers

You can specify an identification name (engineID) for the local or remote SNMP server engine on the
switch. You can configure an SNMP server group that maps SNMP users to SNMP views, and you can
add new users to the SNMP group.
Step 3 access-list access-list-number {deny |
permit} source [ source-wildcard](Optional) If you specified an IP standard access list number in
Step 2, then create the list, repeating the command as many times
as necessary.
•For access-list-number, enter the access list number specif ie d
in Step 2.
•The deny keyword deni es acce ss if th e c ond itio ns are
matc hed. The permit keyword permits access if the conditions
are mat ched .
•For source, ente r the IP addr ess of t he SN MP m ana ger s th at
are permitte d to use the community string to gain acc ess to the
agent.
•(Optional) For source-wildcard, enter the wildcard bits in
dotted decimal notation to be applied to the source. Place ones
in the bi t po sitio ns t hat you wa nt to i gnore .
Recall that the acc ess list is alw ays terminate d by an implicit de ny
stateme nt f or everything .
Step 4 end Return to privileged EXEC mode.
Step 5 show running-config Verify your entries.
Step 6 copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose