User Manual User guide

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014 513
Configuring SNMP Chapter 19
• For source, enter the IP address of the SNMP managers that are
permitted to use the community string to gain access to the agent.
• (Optional) For source-wildcard, enter the wildcard bits in dotted
decimal notation to be applied to the source. Place ones in the bit
positions that you want to ignore.
4. Recall that the access list is always terminated by an implicit deny
statement for everything.
access-list access-list-number {deny | permit}
source [source-wildcard]
5. Return to privileged EXEC mode.
end
6. Verify your entries.
show running-config
7. (Optional) Save your entries in the configuration file.
copy running-config startup-config
To disable access for an SNMP community, set the community string for that
community to the null string (don’t enter a value for the community string). To
remove a specific community string, use the
no snmp-server community
string global configuration command.
This example shows how to assign the strings
open and ieee to SNMP, to allow
read-write access for both, and to specify that open is the community string for
queries on non-IEEE802dot11-MIB objects and
ieee is the community string
for queries on IEEE802dot11-mib objects:
ap(config)# snmp-server view dot11view ieee802dot11
included
ap(config)# snmp-server community open
rw
ap(config)# snmp-server community ieee view
ieee802dot11 rw
Specifying SNMP-Server Group Names
To configure a new SNMP group, or a table that maps SNMP users to SNMP
views, use the following command in global configuration mode:
Configures a new SNMP group, or a table that maps SNMP users to SNMP
views.
snmp-server group [groupname {v1 | v2c | v3 [auth |
noauth | priv]}][read readview] [write writeview]
[notify notifyview] [access access-list]