Adding to or Modifying the Default Configuration

By default, SNMPv1 is configured on Extreme Networks switches. A single community name - public - is configured, which grants read-write access to the whole MIB tree for both SNMPv1 and SNMPv2c.

The beginning command sequence in the default configuration is similar to the first part of the previous example. It looks like this:

System(su)->set snmp community public
System(su)->set snmp group groupRW user public security-model v1
System(su)->set snmp access groupRW security-model v1 read All write All notify All
System(su)->set snmp view viewname All subtree 1
Note

Note

Any use of the parameter 'All' must be exactly as shown in this example. Any other variation (including, but not limited to, values such as 'all' or 'ALL') will not be valid.

You can modify this default configuration as shown in the following examples.

Adding a New Community Name

Use these commands to add a new SNMPv1 community name called newname with the same permissions as the default configuration:

System(su)->set snmp community newname
System(su)->set snmp group groupRW user newname security-model v1

Use this command to remove the “public” community name from the default configuration:

System(su)->clear snmp community public
Note

Note

You can leave the set snmp group groupRW user public security-model v1 statement in the default configuration in case you want to re-activate the public community name at some point, or can clear it as well.

Refer to Configuring Secure SNMP Community Names for a description of a recommended configuration that will prevent unsecured access to SNMP information.