snmpd.comm(SFF)

snmpd.comm -- SNMP communities file

Synopsis

/etc/netmgt/snmpd.comm

Description

The file /etc/netmgt/snmpd.comm contains the definitions for the communities which will be supported by the SNMP agent/server daemon, snmpd(ADMN).

The file contains lines which consist of the following items:

``protocol'': the protocol name (``ip'')
``community_string'': the session or community string used as a password for access to the SNMP agent
``address'': an IP address in decimal dot notation
``privilege'': the privileges to be associated with the community and address pair (READ, WRITE, or NONE; NONE is used to lock out specific communities or hosts)

Lines which begin with backslashes (\) are ignored.

Warnings

The IP address 0.0.0.0 is used as a wild card, meaning any host using the IP protocol can use the community string to gain access to the SNMP agent. Hence it must be used with care. As a safety precaution, never assign the WRITE privilege to entries using a wild card address.

Examples

The following is a valid SNMP configuration file.

ip test1 128.212.64.99 READ  /* read access to specific IP address */
ip test2 128.212.64.15 WRITE  /* write access to specific IP address */
ip public 0.0.0.0 READ  /* read access to any IP address */
ip interop 0.0.0.0 READ  /* read access to any IP address */

The following is the default snmpd.comm file:

ip public 0.0.0.0 read
ip interop 0.0.0.0 read
ip isc-i88 0.0.0.0 read

References

snmpd(ADMN)

RFC 1155, RFC 1157, RFC 1213