Cisco Systems IE 2000 Configuring Community Strings

36-9
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 36 Configuring SNMP
How to Configure SNMP
Configuring Community Strings
Note To disable access for an SNMP community, set the community string for that community to the null
string (do not enter a value for the community string).
Command Purpose
Step 1 configure terminal Enters global configuration mode.
Step 2 snmp-server community string [view
view-name] [ro | rw]
[access-list-number]
Configures the community string.
Note The @ symbol is used for delimiting the context information.
Avoid using the @ symbol as part of the SNMP community string
when configuring this command.
• string—Specifies a string that acts like a password and permits access
to the SNMP protocol. You can configure one or more community
strings of any length.
• (Optional) view—Specifies the view record accessible to the
community.
• (Optional) Specifies either read-only (ro) if you want authorized
management stations to retrieve MIB objects, or specifies read-write
(rw) if you want authorized management stations to retrieve and
modify MIB objects. By default, the community string permits
read-only access to all objects.
• (Optional) access-list-number—Specifies an IP standard access list
numbered from 1 to 99 and 1300 to 1999.
Step 3 access-list access-list-number {deny |
permit} source [source-wildcard]
(Optional) If you specified an IP standard access list number in Step 2,
then create the list, repeating the command as many times as necessary.
• access-list-number—Specifies the access list number specified in
Step 2.
• deny — Denies access if the conditions are matched. The permit
keyword permits access if the conditions are matched.
• source—Specifies the IP address of the SNMP managers that are
permitted to use the community string to gain access to the agent.
• (Optional) source-wildcard—Specifies the wildcard bits in dotted
decimal notation to be applied to the source. Place ones in the bit
positions that you want to ignore.
The access list is always terminated by an implicit deny statement for
everything.
Step 4 end Returns to privileged EXEC mode.