Issue about SNMP on CE series switches

Created: Jun 29, 2019 09:25:52Latest reply: Jun 29, 2019 09:29:52 60 2 0 0
  Rewarded Hi-coins: 0 (problem resolved)

Does the length of SNMP community name can change? And how can I chage it.

  • x
  • convention:

Featured Answers
yogijain
MVE Created Jun 29, 2019 09:29:52 Helpful(0) Helpful(0)

Three SNMP versions are available: v1, v2c, and v3. SNMPv1 and SNMPv2c support community names, but SNMPv3 does not support.

Run the snmp-agent community { read | write } { community-name | cipher community-name } [ aliasalias-name ] command in the system view to set the SNMP community name.

imgDownload?uuid=4fa7864525b14e74abdb4ed NOTE:

The alias alias-name parameter is only supported in V100R003C00 and later versions. To facilitate identification of community names, set alias for community names. The alias are stored in the configuration file as plain text.

Note the following points when configuring SNMP community names:
  • By default, the system checks the community name complexity. The community name that fails the check is not allowed.

    The community name must meet the following requirements:

  • The community name contains at least eight characters.
  • The community name must be a combination of at least two of uppercase letters A to Z, lowercase letters a to z, digits, and special characters (excluding question masks and spaces). If the character string is quoted by double quotation marks, the character string can contain spaces.

To ensure SNMP community name security, do not disable community name complexity check by running the snmp-agent community complexity-check disable command.

If you set different rights (read or write) for the same community name, the last configuration takes effect.

For example, set the read/write community name for SNMPv2c to Private123.

<HUAWEI> system-view
[~HUAWEI] snmp-agent sys-info version v2c  //Configure the SNMP version as SNMPv2c
[*HUAWEI] snmp-agent community write Private123  //Configure the read-write community name as Private123
[*HUAWEI] commit

  • x
  • convention:

My%20name%20is%20Yogendra%20Jain%2C%20and%20I%20work%20as%20a%20Project%20Manager%20at%20Brightstar%20telecommunication%20India%20Limited.%20We%20are%20a%20top-ranking%205-star%20CSP%20%2F%20ASP%20Partner.I%20have%20more%20than%2013%20years%20of%20experience%20in%20the%20telecom%20domain.%20Working%20in%20the%20IP%20domain%20for%20the%20last%2010%20years%2C%20I%20participated%20in%20ISP%2C%20PSU%2C%20and%20governance%20projects%20using%20versatile%20OEMS%20products%20like%20Cisco%2C%20Brocade%2C%20Huawei%20and%20juniper.%20I%20have%20also%20been%20blessed%20with%20more%20than%2010%20technical%20certifications..and%20active%20member%20of%20Community%20since%20last%202%20yr
All Answers
DCN_Documentation
DCN_Documentation Official Created Jun 29, 2019 09:26:52 Helpful(0) Helpful(0)

Run the snmp-agent community complexity-check disable command in the system view to disable complexity check for community names. Then you can change the minimum length of an SNMP community name. A community name that does not meet complexity requirement may be attacked and decrypted by malicious users, affecting device security. Therefore, you are advised not to disable complexity check for community names.
  • x
  • convention:

yogijain
yogijain MVE Created Jun 29, 2019 09:29:52 Helpful(0) Helpful(0)

Three SNMP versions are available: v1, v2c, and v3. SNMPv1 and SNMPv2c support community names, but SNMPv3 does not support.

Run the snmp-agent community { read | write } { community-name | cipher community-name } [ aliasalias-name ] command in the system view to set the SNMP community name.

imgDownload?uuid=4fa7864525b14e74abdb4ed NOTE:

The alias alias-name parameter is only supported in V100R003C00 and later versions. To facilitate identification of community names, set alias for community names. The alias are stored in the configuration file as plain text.

Note the following points when configuring SNMP community names:
  • By default, the system checks the community name complexity. The community name that fails the check is not allowed.

    The community name must meet the following requirements:

  • The community name contains at least eight characters.
  • The community name must be a combination of at least two of uppercase letters A to Z, lowercase letters a to z, digits, and special characters (excluding question masks and spaces). If the character string is quoted by double quotation marks, the character string can contain spaces.

To ensure SNMP community name security, do not disable community name complexity check by running the snmp-agent community complexity-check disable command.

If you set different rights (read or write) for the same community name, the last configuration takes effect.

For example, set the read/write community name for SNMPv2c to Private123.

<HUAWEI> system-view
[~HUAWEI] snmp-agent sys-info version v2c  //Configure the SNMP version as SNMPv2c
[*HUAWEI] snmp-agent community write Private123  //Configure the read-write community name as Private123
[*HUAWEI] commit

  • x
  • convention:

My%20name%20is%20Yogendra%20Jain%2C%20and%20I%20work%20as%20a%20Project%20Manager%20at%20Brightstar%20telecommunication%20India%20Limited.%20We%20are%20a%20top-ranking%205-star%20CSP%20%2F%20ASP%20Partner.I%20have%20more%20than%2013%20years%20of%20experience%20in%20the%20telecom%20domain.%20Working%20in%20the%20IP%20domain%20for%20the%20last%2010%20years%2C%20I%20participated%20in%20ISP%2C%20PSU%2C%20and%20governance%20projects%20using%20versatile%20OEMS%20products%20like%20Cisco%2C%20Brocade%2C%20Huawei%20and%20juniper.%20I%20have%20also%20been%20blessed%20with%20more%20than%2010%20technical%20certifications..and%20active%20member%20of%20Community%20since%20last%202%20yr

Reply

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login