R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Command Reference-6PW101

170
To make sure that the MIB objects are accessible only to a specific NMS, use a basic ACL to identify the
source IP address of the NMS. To set the range of the MIB objects available for the community, use a MIB
view.
In FIPS mode, this command is not available and only SNMPv3 settings can be configured.
Related commands: snmp-agent mib-view.
Examples
# Create the read-only community readaccess so an NMS can use the protocol SNMPv1 or SNMPv2c
and community name readaccess to read the MIB objects in the default view ViewDefault.
<Sysname> system-view
[Sysname] snmp-agent sys-info version v1 v2c
[Sysname] snmp-agent community read readaccess
• Set the SNMP version on the NMS to SNMPv1 or SNMPv2c
• Fill in the read-only community name readaccess
• Establish a connection, and the NMS can perform read-only operations to the MIB objects in the
default MIB view (ViewDefault) on the device
# Create the read and write community writeaccess so only the host at 1.1.1.1 can use the protocol
SNMPv2c and community name writeaccess to read and set the MIB objects in the default view
ViewDefault.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 1.1.1.1 0.0.0.0
[Sysname-acl-basic-2001] rule deny source any
[Sysname-acl-basic-2001] quit
[Sysname] snmp-agent sys-info version v2c
[Sysname] snmp-agent community write writeaccess acl 2001
• Set the IP address of the NMS to 1.1.1.1
• Set the SNMP version on the NMS to SNMPv2c
• Fill in the write community name writeaccess; namely, the NMS can perform read-only operations
to the MIB objects in the default MIB view (ViewDefault) on the device
# Create the read and write community wr-sys-acc so an NMS can use the protocol SNMPv1 or
SNMPv2c, community name wr-sys-acc to read and set the MIB objects in the system subtree (OID
1. 3. 6 .1. 2.1.1) .
<Sysname> system-view
[Sysname] snmp-agent sys-info version v1 v2c
[Sysname] undo snmp-agent mib-view ViewDefault
[Sysname] snmp-agent mib-view included test system
[Sysname] snmp-agent community write wr-sys-acc mib-view test
• Set the SNMP version on the NMS to SNMPv1 or SNMPv2c
• Fill in the write community name wr-sys-acc
• Establish a connection, and the NMS can perform read and write operations to the MIB objects in
system view on the device