Configuring Community Strings via SNMP
To configure community strings, the EMS must use the standard snmpCommunityMIB. To configure the trap community string, the EMS must also use the snmpTargetMIB.
|
➢
|
To add a read-only v2user community string: |
|
1.
|
Add a new row to the snmpCommunityTable with CommunityName v2user. |
|
2.
|
Add a row to the vacmSecurityToGroupTable for SecurityName v2user, GroupName ReadGroup and SecurityModel snmpv2c. |
|
➢
|
To delete the read-only v2user community string: |
|
1.
|
If v2user is being used as the trap community string, follow the procedure for changing the trap community string. (See below.) |
|
2.
|
Delete the snmpCommunityTable row with CommunityName v2user. |
|
3.
|
Delete the vacmSecurityToGroupTable row for SecurityName v2user, GroupName ReadGroup and SecurityModel snmpv2c. |
|
➢
|
To add a read-write v2admin community string: |
|
1.
|
Add a new row to the snmpCommunityTable with CommunityName v2admin. |
|
2.
|
Add a row to the vacmSecurityToGroupTable for SecurityName v2admin, GroupName ReadWriteGroup and SecurityModel snmpv2c. |
|
➢
|
To delete the read-write v2admin community string: |
|
1.
|
If v2admin is being used as the trap community string, follow the procedure for changing the trap community string. (See below.) |
|
2.
|
Delete the snmpCommunityTable row with a CommunityName of v2admin and GroupName of ReadWriteGroup. |
|
➢
|
To change the only read-write community string from v2admin to v2mgr: |
|
1.
|
Follow the procedure above to add a read-write community string to a row for v2mgr. |
|
2.
|
Set up the EM such that subsequent set requests use the new community string, v2mgr. |
|
3.
|
If v2admin is being used as the trap community string, follow the procedure to change the trap community string. (See below.) |
|
4.
|
Follow the procedure above to delete a read-write community name in the row for v2admin. |
The following procedure assumes that a row already exists in the snmpCommunityTable for the new trap community string. The trap community string can be part of the TrapGroup, ReadGroup, or ReadWriteGroup. If the trap community string is used solely for sending traps (recommended), then it should be made part of the TrapGroup.
|
➢
|
To change the trap community string: |
|
1.
|
Add a row to the vacmSecurityToGroupTable with these values: SecurityModel=2, SecurityName=the new trap community string, GroupName=TrapGroup, ReadGroup or ReadWriteGroup. The SecurityModel and SecurityName objects are row indices. |
You must add GroupName and RowStatus on the same set.
|
2.
|
Modify the SecurityName field in the appropriate row of the snmpTargetParamsTable. |
|
3.
|
Remove the row from the vacmSecurityToGroupTable with SecurityName=the old trap community string. |