Linux Platform

To set up limited security for SNMP, you can create a community string in the /etc/snmp/snmpd.conf file. For example:

# access granted using community string mfwk
rocommunity mfwk
proxy -v1 -c public gf-ip-address:gf-port 1.3.6.1.4.1.42.2.9999.1.1.1

Substitute the IP address for the machine on which the Enterprise Server is running for gf-ip-address. Substitute the port for the Enterprise Server for gf-port.

Users must indicate a community string when connecting to the SNMP master agent. Requests not specifying the correct community string are rejected. The following snmpwalk command specifies the correct community string:

/usr/bin/snmpwalk -v1 -c mfwk localhost 1.3.6.1.4.1.42.2.9999.1.1.1.1.1

After you have modified the snmpd.conf file, restart the snmpd daemon using the following command:

/etc/rc.d/init.d/snmpd restart

You can also verify the status:

/etc/rc.d/init.d/snmpd status

Communities are a quick wrapper around the more complex and powerful com2sec, group, access, and view directive lines. Communities are not as efficient as these directives, because groups are not created, so the tables are potentially larger. These directives are not recommended for complex environments. If your environment is relatively simple or you can sustain a small negative performance impact, use these directives.