snmpd.comm(4snmp)
snmpd.comm --
SNMP communities file
Synopsis
/etc/netmgt/snmpd.comm
Description
The file /etc/netmgt/snmpd.comm contains the definitions for the
communities which will be supported by the SNMP agent/server
daemon,
snmpd(1Msnmp).
The file contains lines which consist of the following items:
- ``protocol''
-
a protocol name (either ``ip'' or ``ipx'')
- ``community_string''
-
the session or community string used as a password for access to the
SNMP agent
- ``address''
-
an IP address in dot notation or an IPX
address,
depending on the protocol used:
-
IP notation is in decimal
-
IPX notation is 4 bytes of network address followed by a colon
(:), then 6 bytes of node address, all in hexadecimal
- ``privilege''
-
the privileges to be associated with the community and address pair
(READ, WRITE, or NONE; NONE is used
to lock out specific communities or hosts)
Lines which begin with backslashes (\) are ignored.
Warnings
The IP address 0.0.0.0 and the IPX address
00000000:000000000000 are used as wild cards, meaning any host using the
specified protocol can use the community string to gain access to the
SNMP agent. Hence it must be used with care. As a safety
precaution, never assign the WRITE privilege to entries using a
wild card address.
Examples
The following is a valid SNMP configuration file.
ip test1 128.212.64.99 READ /* read access to specific IP address */
ip test2 128.212.64.15 WRITE /* write access to specific IP address */
ipx test3 0101DB7F:000000000001 READ /* read access to specific IPX address */
ipx public 00000000:000000000000 READ /* read access to any IPX address */
ip public 0.0.0.0 READ /* read access to any IP address */
ip interop 0.0.0.0 READ /* read access to any IP address */
UnixWare includes the following default snmpd.comm file:
ip public 0.0.0.0 read
ip interop 0.0.0.0 read
ip isc-i88 0.0.0.0 read
ipx public 00000000:000000000000 read
References
snmpd(1Msnmp)
RFC 1155, RFC 1157, RFC 1213
30 January 1998
© 1998 The Santa Cruz Operation, Inc. All rights reserved.