User’s Manual of WGSD-1022/WGSD-8000

5.20 SNMP Commands

5.20.1 snmp-server community

The snmp-server community global configuration command sets up the community access string to permit access to the SNMP protocol. To remove the specified community string, use the no form of this command.

Syntax

snmp-server community community [ro rw su] [ip-address]snmp-server community-group community group-name[ip-address]no snmp-server community string [ip-address]

ƒcommunity — Character string that acts like a password and permits access to the SNMP protocol. (Range: 1 - 20 characters)

ƒro — Specifies read-only access.

ƒrw — Specifies read-write access.

ƒsu — Specifies SNMP administrator access.

ƒip-address— Management station IP address. Default is all IP addresses. An out-of-band IP address can be specified as described in the usage guidelines.

ƒgroup-name— Name of a previously defined group. The group defines the objects available to the community. (Range: 1 - 30 characters)

ƒThe View-namecommand cannot be specified for su, which has access to the whole MIB. However, the View-namecommand can be used to restrict the access rights of a community string.

Specifying a view-name parameter does the following:

ƒGenerates an internal security-name.

ƒMaps the internal security-name for SNMPv1 and SNMPv2 security models to an internal group-name.

ƒMaps the internal group-name for SNMPv1 and SNMPv2 security models to view-name (read-view and notify-view always, and for rw for write-view also)

The group-namecommand can be used to restrict the access rights of a community string.

Specifying a group-name parameter does the following:

ƒGenerates an internal security-name.

ƒMaps the internal security-name for SNMPv1 and SNMPv2 security models to the group-name.

To define a management station on the out-of-band port, use the out-of-band IP address format —oob/ipaddress.

For a user to define OOB management port configurations, such as ip address, default gateway, RADIUS, and so forth, you must define two SNMP communities. A super user can configure OOB management port settings with a single community, by switching between the two communities.

The OOB/ip address indicates whether the selected management station being configured is an OOB management station. The type is used for a different purpose. From an SNMP perspective, the OOB port is treated as a separate device. Therefore, when defining an SNMP community, the administrator must indicate which tables are being configured. If type is oob, this indicates that OOB tables are being configured. If type is router, it means that the device's tables are being configured.

- 288 –