Creating a New Configuration

New SNMPv1/v2c Configuration shows how to create a new SNMPv1 or SNMPv2c configuration. This example assumes that you haven‘t any preconfigured community names or access rights.

Note

The v1 parameter in this example can be replaced with v2 for SNMPv2c configuration.

New SNMPv1/v2c Configuration

Step	Task	Command(s)
1	Create a community name.	set snmp community community [securityname securityname] [context context] [transport transport] [volatile | nonvolatile]
2	Create a security model (VACM) group using the community name you assigned in step 1.	set snmp group groupname user communityname security-model v1
3	Set security access rights for the VACM group.	set snmp access groupname security-model v1 read viewname write viewname notify viewname
4	Set MIB view attributes.	set snmp view viewname viewname subtree subtree
5	Specify the target parameters for SNMP notification message generation.	set snmp targetparams paramset_name user community name security-model v1 message processing v1
6	Specify the target address to which SNMP notification messages generated using the specified target parameters will be sent.	set snmp targetaddr targetaddr_name ipaddr param paramset_name taglist taglist
7	Specify a name for this notification entry and bind it to the target address.	set snmp notify notify tag taglist

The following example displays an S- K- and 7100-Series device configuration using the steps in New SNMPv1/v2c Configuration. It shows how to:

• Create the community name public.
• Assign the public user to the group named groupRW and the SNMPv1 security model.
• Specify that, if SNMP messages are received with the public name string, the view RW for read requests, write requests, and notify requests will be applied to this user.
• For the view RW, include the MIB subtree denoted with OID 1 and 0.0, and exclude view access to subtree denoted with OID 1.3.6.1.6.3.13.1 (which is the notification MIB).
• Assign a target parameters entry, TVv1public, for security level processing to the public community name.
• Create a target address entry named TVTrap at IP address 10.42.1.10, which will use security and authorization criteria contained in the target parameters entry called TVv1public, and bind these parameters together with a tag entry called TVTrapTag.

System(su)->set snmp community public
System(su)->set snmp group groupRW user public security model v1
System(su)->set snmp access groupRW security-model v1 read RW write RW notify RW
System(su)->set snmp view viewname RW subtree 1
System(su)->set snmp view viewname RW subtree 0.0
System(su)->set snmp view viewname RW subtree 1.3.6.1.6.3.13.1 excluded
System(su)->set snmp targetparams TVv1public user public security-model v1 message             processing v1
System(su)->set snmp targetaddr TVTrap 10.42.1.10 param TVv1public taglist             TVTraptag
System(su)->set snmp notify TVTrap tag TVTrapTag