This section provides information about configuring SNMP with CLI.
This section describes how to configure SNMP components which apply to SNMPv1 and SNMPv2c, and SNMPv3 on the router.
Nokia routers are based on SNMPv3. To use the routers with SNMPv1 and/or SNMPv2c, SNMP community strings must be configured. Three predefined access methods are available when SNMPv1 or SNMPv2c access is required. Each access method (r, rw, or rwa) is associated with an SNMPv3 access group that determines the access privileges and the scope of managed objects available. The community command is used to associate a community string with a specific access method and the required SNMP version (SNMPv1 or SNMPv2c). The access methods are:
If the predefined access groups do not meet your access requirements, then additional access groups and views can be configured. The usm-community command is used to associate an access group with an SNMPv1 or SNMPv2c community string.
SNMP trap destinations are configured in the config>log>snmp-trap-group context.
By default, the 7210 SAS implements SNMPv3. If security features other than the default views are required, then the following parameters must be configured:
This section provides information to configure SNMP parameters and provides examples of common configuration tasks. The minimal SNMP parameters are:
For SNMPv1 and SNMPv2c:
For SNMPv3:
The following are sample SNMP default views, access groups, and attempts parameters.
Use the following syntax to configure SNMP scenarios.
SNMPv1 and SNMPv2c community strings are used to define the relationship between an SNMP manager and agent. The community string acts like a password to permit access to the agent. The access granted with a community string is restricted to the scope of the configured group.
One or more of these characteristics associated with the string can be specified:
Default access features are preconfigured by the agent for SNMPv1/SNMPv2c.
Use the following syntax to configure community options.
The following is a sample SNMP community configuration output.
Use the following syntax to configure view options.
The following is a sample view configuration output.
The access command creates an association between a user group, a security model and the views that the user group can access. Access must be configured unless security is limited to the preconfigured access groups and views for SNMPv1 and SNMPv2. An access group is defined by a unique combination of the group name, security model and security level.
Use the following syntax to configure access features.
The following is a sample access configuration output with the view configurations.
Use the following syntax to configure user group and authentication parameters.
The following is a sample user SNMP configuration output.
User-based security model (USM) community strings associate a community string with an SNMPv3 access group and its view. The access granted with a community string is restricted to the scope of the configured group.
By default, the implementation of SNMP uses SNMPv3. However, to implement SNMPv1 and SNMPv2c, USM community strings must be explicitly configured.
Use the following syntax to configure USM community options.
The following is a sample SNMP community configuration output.
The group grouptest was configured in theconfig>system>security>snmp> access CLI context.
Use the following syntax to modify the system SNMP options.
The following are sample system SNMP default values.