R3166-R3206-HP High-End Firewalls System Management and Maintenance Command Reference-6PW101

145
<Sysname> system-view
[Sysname] snmp-agent calculate-password authkey mode md5 local-engineid
The secret key is: 09659EC5A9AE91BA189E5845E1DDE0CC
snmp-agent community
Syntax
snmp-agent community { read | write } community-name [ acl acl-number | mib-view view-name ] *
undo snmp-agent community { read | write } community-name
View
System view
Default level
3: Manage level
Parameters
read: Indicates that the community has read only access right to the MIB objects; that is, the NMS can
perform read-only operations when it uses this community name to access the agent.
write: Indicates that the community has read and write access right to the MIB objects; that is, the NMS
can perform read and write operations when it uses this community name to access the agent.
community-name: Community name, a string of 1 to 32 characters.
acl acl-number: Associates a basic ACL with the community name. acl-number is in the range 2,000 to
2,999. By using an ACL, you can configure to allow or prohibit the access to the agent from the NMS
with the specified source IP address.
mib-view view-name: Specifies MIB objects that the NMS can access. view-name represents the MIB
view name, a string of 1 to 32 characters. If no keyword is specified, the default view is ViewDefault (The
view created by the system after SNMP agent is enabled).
Description
Use the snmp-agent community command to create a new SNMP community. Parameters to be
configured include access right, community name, ACL, and accessible MIB views.
Use the undo snmp-agent community command to delete a specified community.
This command can be applied in SNMPv1 and v2c networking environments.
A community is composed of NMSs and SNMP agents, and is identified by the community name, which
functions as a password. In a community, when devices communicate with each other, they use
community name for authentication. The NMS and the SNMP agent can access each other only when
they are configured with the same community name. Typically, public is used as the read-only community
name, and private is used as the read and write community name. For security purposes, HP
recommends that you configure a community name other than public and private.
• The keyword acl specifies that only the NMS with a qualified IP address can access the agent.
• The argument community-name specifies the community name used by the NMS when it accesses
the agent.
• The keyword mib-view specifies the MIB objects which the NMS can access. All MIB views with the
name view-name will be referenced.
• The keywords read and write specify the access type.