Users Guide

546 SNMP
read-write MIB access privileges are configured individually, and are then
combined into a community-group which is configured for subnet
10.85.234.0/24.
NOTE:
The community name may need to be escaped if attempting to use it in a shell
environment with tools like snmpstatus or snmpwalk.
1 Create a view with write access to the private MIB.
console#configure
console(config)#snmp-server view MyWriteView private included
2 Create a view with read access to the entire SNMP MIB except the
community table.
console(config)#snmp-server view "MyReadView"
snmpCommunityTable excluded
console(config)#snmp-server view "MyReadView" iso included
3 Configure a community group to allow both read and write access to
different MIB trees. SNMP v2c protocol is required.
console(config)#snmp-server group "MyGroup" v2 read
"MyReadView" write "MyWriteView"
4 Allow station 10.85.234.2 read-only and read/write access to specific MIB
groups.
console(config)#snmp-server community-group "%%g77&&g!~"
MyGroup ipaddress 10.85.234.0 255.255.255.0
Configuring SNMPv3
This example shows how to complete a basic SNMPv3 configuration. The
commands create a view that includes objects from the
internet MIB subtree
(OID 1.3.6.1), which includes all objects on the switch.
The user named
admin has read-write privileges to all objects within the view
(in other words, all objects on the switch) after supplying the appropriate
authentication credentials (secretkey).
To configure the switch:
1 Configure the view.
view_snmpv3 and specify the objects to include.
console#configure
console(config)#snmp-server view view_snmpv3 internet included
2 Create the group group_snmpv3 and allow read-write access to the view
configured in the previous step.