Quick Reference Guide

PowerConnect B-Series TI24X Configuration Guide 1013
53-1002269-02
Establishing SNMP community strings
32
NOTE
If you specify encryption option 1, the software assumes that you are entering the encrypted form
of the community string. In this case, the software decrypts the community string you enter before
using the value for authentication. If you accidentally enter option 1 followed by the clear-text
version of the community string, authentication will fail because the value used by the software will
not match the value you intended to use.
The command in the example above adds the read-write SNMP community string “private”. When
you save the new community string to the startup-config file (using the write memory command),
the software adds the following command to the file.
snmp-server community 1 <encrypted-string> rw
To add a non-encrypted community string, you must explicitly specify that you do not want the
software to encrypt the string. Here is an example.
PowerConnect(config)# snmp-server community 0 private rw
PowerConnect(config)# write memory
The command in this example adds the string “private” in the clear, which means the string is
displayed in the clear. When you save the new community string to the startup-config file, the
software adds the following command to the file.
snmp-server community 0 private rw
The view <viewname> parameter is optional. It allows you to associate a view to the members of
this community string. Enter up to 32 alphanumeric characters. If no view is specified, access to
the full MIB is granted. The view that you want must exist before you can associate it to a
community string. Here is an example of how to use the view parameter in the community string
command.
PowerConnect(config)# snmp-s community myread ro view sysview
The command in this example associates the view “sysview” to the community string named
“myread”. The community string has read-only access to “sysview”. For information on how to
create views, refer to “SNMP v3 Configuration examples” on page 1023.
The <standard-ACL-name> | <standard-ACL-id> parameter is optional. It allows you to specify
which ACL group will be used to filter incoming SNMP packets. You can enter either the ACL name
or its ID. Here are some examples.
PowerConnect(config)# snmp-s community myread ro view sysview 2
PowerConnect(config)# snmp-s community myread ro view sysview myACL
The command in the first example indicates that ACL group 2 will filter incoming SNMP packets;
whereas, the command in the second example uses the ACL group called “myACL” to filter incoming
packets.Refer to “Using ACLs to restrict SNMP access” on page 858 for more information.
NOTE
To make configuration changes, including changes involving SNMP community strings, you must
first configure a read-write community string using the CLI. Alternatively, you must configure another
authentication method and log on to the CLI using a valid password for that method.
Displaying the SNMP community strings
To display the configured community strings, enter the following command at any CLI level.