1014 BigIron RX Series Configuration Guide53-1002253-01Establishing SNMP community strings36Syntax: snmp-server community [0] <string>ro | rw [view <viewname>] [<standard-acl-name> | <standard-acl-id>]By default, the community string is encrypted. When you save the new community string to thestartup configuration file, the software adds the following command to the file.snmp-server community 1 rwIf you want to create a non-encrypted community string, use the 0 option as in the followingexample.BigIron RX(config)# snmp-server community 0 private rwBigIron RX(config)# write memoryThe command in the example above adds the string “private” in the clear, which means the stringis displayed in the clear text form. When you save the community string to the startup configurationfile, the software adds the following command to the file.snmp-server community 0 private rwThe <string> parameter specifies the community string name. The string can be up to 32characters long.The ro | rw parameter specifies whether the string is read-only (ro) or read-write (rw).The view <viewstring> parameter is optional. It allows you to associate a view to the members ofthis community string. Enter up to 32 alphanumeric characters. If no view is specified, access tothe full MIB is granted. The view that you want must exist before you can associate it to acommunity string. Here is an example of how to use the view parameter in the community stringcommand.BigIron RX(config)# snmp-s community myread ro view sysviewThe command in this example associates the view “sysview” to the community string named“myread”. The community string has read-only access to “sysview”. For information on how createviews, refer to “Defining SNMP views” on page 1020.The <standard-acl-name> | <standard-acl-id parameter is optional. It allows you to specify whichACL will be used to filter incoming SNMP packets. You can enter either the ACL name or its ID. Hereare examples.BigIron RX(config) # snmp-s community myread ro view sysview 2BigIron RX(config) # snmp-s community myread ro view sysview myaclThe command in the first example indicates that ACL group 2 will filter incoming SNMP packets,whereas the command in the second example uses the ACL group called “myacl” to filter incomingpackets. Refer to “Using ACLs to restrict SNMP access” on page 65 for more information.Displaying the SNMP community stringsTo display the configured community strings, enter the following command at any CLI level.BigIron RX(config)# show snmp serverSyntax: show snmp serverNOTEIf display of the strings is encrypted, the strings are not displayed. Encryption is enabled by default.
