Nortel Networks 8600 manual SNMP Community Strings

Technical Configuration Guide for SNMP v2.0 December 2006

TrustedHostUserName: none

AccessLevel: readWriteAll

AccessStrict: false

Usage: 385

•ERS-8610:5#show sys access-policysnmp-group-infosnmpv3-groups :

Policy 1	snmpv3-groups:
	Group Name	Snmp-Model
Policy 2	snmpv3-groups:
	Group Name	Snmp-Model
	readgrp	snmpv1
	readgrp	snmpv2c
	v1v2grp	snmpv1
	v1v2grp	snmpv2c

3.3.3 SNMP Community Strings

For security reasons, the SNMP agent validates each request from an SNMP manager before responding to the request. This is accomplished by verifying that the manager belongs to a valid SNMP community. An SNMP community is a logical relationship between an SNMP agent and one or more SNMP managers (the manager software implements the protocols used to exchange data with SNMP agents). You define communities locally at the agent.

The agent establishes one community for each combination of authentication and access control characteristics that you choose. You assign each community a unique name (community string), and all members of a community have the same access privileges, either read-only or read-write:

•Read-only: members can view configuration and performance information.

•Read-write: members can view configuration and performance information, and also change the configuration.

By defining a community, an agent limits access to its MIB to a selected set of management stations. By using more than one community, the agent can provide different levels of MIB access to different management stations.

SNMP community strings are required for access to the switch using Device Manager or other SNMP-based management software. You set the SNMP community strings using the CLI. If you have read/write/all access authority, you can modify the SNMP community strings for access to the device through Device Manager.

In the ERS 8000 Series switch software release 3.7, the CLI command save config creates a hidden and encrypted file that contains the SNMP community table information. The SNMP community strings are not referenced in the ERS 8600 configuration file. Please see publication number 317177-A titled Release Notes for the ERS 8000 Series Switch Software Release 3.7 for more details regarding upgrading SNMP to release 3.7.

Caution: For security reasons, Nortel Networks recommends that you set the passwords to values other than the factory defaults.

______________________________________________________________________________________________________

NORTEL External Distribution 13