2
|
1 |
# ----------------------------------------------------------------------
|
|
2 |
# Template for SNMP Access Control List File
|
|
3 |
#
|
|
4 |
# o Copy this template to snmp.acl
|
|
5 |
# o Set access control for SNMP support
|
|
6 |
# o Change the permission of snmp.acl to be read-only
|
|
7 |
# by the owner.
|
|
8 |
#
|
|
9 |
# See below for the location of snmp.acl file.
|
|
10 |
# ----------------------------------------------------------------------
|
|
11 |
|
|
12 |
############################################################
|
|
13 |
# SNMP Access Control List File
|
|
14 |
############################################################
|
|
15 |
#
|
|
16 |
# Default location of this file is $JRE/lib/management/snmp.acl.
|
|
17 |
# You can specify an alternate location by specifying a property in
|
|
18 |
# the management config file $JRE/lib/management/management.properties
|
|
19 |
# or by specifying a system property (See that file for details).
|
|
20 |
#
|
|
21 |
|
|
22 |
|
|
23 |
##############################################################
|
|
24 |
# File permissions of the snmp.acl file
|
|
25 |
##############################################################
|
|
26 |
#
|
|
27 |
# Since there are cleartext community strings stored in this file,
|
|
28 |
# this ACL file must be readable by ONLY the owner,
|
|
29 |
# otherwise the program will exit with an error.
|
|
30 |
#
|
|
31 |
##############################################################
|
|
32 |
# Format of the acl group
|
|
33 |
##############################################################
|
|
34 |
#
|
|
35 |
# communities: a list of SNMP community strings to which the
|
|
36 |
# access control applies separated by commas.
|
|
37 |
#
|
|
38 |
# access: either "read-only" or "read-write".
|
|
39 |
#
|
|
40 |
# managers: a list of hosts to be granted the access rights.
|
|
41 |
# Each can be expressed as any one of the following:
|
|
42 |
# - hostname: hubble
|
|
43 |
# - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82
|
|
44 |
# - ip v4 and v6 netmask prefix notation: 123.456.789.0/24,
|
|
45 |
# fe80::a00:20ff:fe9b:ea82/64
|
|
46 |
# see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt)
|
|
47 |
#
|
|
48 |
# An example of two community groups for multiple hosts:
|
|
49 |
# acl = {
|
|
50 |
# {
|
|
51 |
# communities = public, private
|
|
52 |
# access = read-only
|
|
53 |
# managers = hubble, snowbell, nanak
|
|
54 |
# }
|
|
55 |
# {
|
|
56 |
# communities = jerry
|
|
57 |
# access = read-write
|
|
58 |
# managers = hubble, telescope
|
|
59 |
# }
|
|
60 |
# }
|
|
61 |
#
|
|
62 |
##############################################################
|
|
63 |
# Format of the trap group
|
|
64 |
##############################################################
|
|
65 |
#
|
|
66 |
# trap-community: a single SNMP community string that will be included
|
|
67 |
# in the traps sent to the hosts.
|
|
68 |
#
|
|
69 |
# hosts: a list of hosts to which the SNMP agent will send traps.
|
|
70 |
#
|
|
71 |
# An example of two trap community definitions for multiple hosts:
|
|
72 |
# trap = {
|
|
73 |
# {
|
|
74 |
# trap-community = public
|
|
75 |
# hosts = hubble, snowbell
|
|
76 |
# }
|
|
77 |
# {
|
|
78 |
# trap-community = private
|
|
79 |
# hosts = telescope
|
|
80 |
# }
|
|
81 |
# }
|
|
82 |
#
|
|
83 |
############################################################
|
|
84 |
#
|
|
85 |
# Update the community strings (public and private) below
|
|
86 |
# before copying this template file
|
|
87 |
#
|
|
88 |
# Common SNMP ACL Example
|
|
89 |
# ------------------------
|
|
90 |
#
|
|
91 |
# o Only localhost can connect, and access rights
|
|
92 |
# are limited to read-only
|
|
93 |
# o Traps are sent to localhost only
|
|
94 |
#
|
|
95 |
#
|
|
96 |
# acl = {
|
|
97 |
# {
|
|
98 |
# communities = public, private
|
|
99 |
# access = read-only
|
|
100 |
# managers = localhost
|
|
101 |
# }
|
|
102 |
# }
|
|
103 |
#
|
|
104 |
#
|
|
105 |
# trap = {
|
|
106 |
# {
|
|
107 |
# trap-community = public
|
|
108 |
# hosts = localhost
|
|
109 |
# }
|
|
110 |
# }
|