| # ---------------------------------------------------------------------- |
| # Template for SNMP Access Control List File |
| # |
| # o Copy this template to snmp.acl |
| # o Set access control for SNMP support |
| # o Change the permission of snmp.acl to be read-only |
| # by the owner. |
| # |
| # See below for the location of snmp.acl file. |
| # ---------------------------------------------------------------------- |
| |
| ############################################################ |
| # SNMP Access Control List File |
| ############################################################ |
| # |
| # Default location of this file is $JRE/lib/management/snmp.acl. |
| # You can specify an alternate location by specifying a property in |
| # the management config file $JRE/lib/management/management.properties |
| # or by specifying a system property (See that file for details). |
| # |
| |
| |
| ############################################################## |
| # File permissions of the snmp.acl file |
| ############################################################## |
| # |
| # Since there are cleartext community strings stored in this file, |
| # this ACL file must be readable by ONLY the owner, |
| # otherwise the program will exit with an error. |
| # |
| ############################################################## |
| # Format of the acl group |
| ############################################################## |
| # |
| # communities: a list of SNMP community strings to which the |
| # access control applies separated by commas. |
| # |
| # access: either "read-only" or "read-write". |
| # |
| # managers: a list of hosts to be granted the access rights. |
| # Each can be expressed as any one of the following: |
| # - hostname: hubble |
| # - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82 |
| # - ip v4 and v6 netmask prefix notation: 123.456.789.0/24, |
| # fe80::a00:20ff:fe9b:ea82/64 |
| # see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt) |
| # |
| # An example of two community groups for multiple hosts: |
| # acl = { |
| # { |
| # communities = public, private |
| # access = read-only |
| # managers = hubble, snowbell, nanak |
| # } |
| # { |
| # communities = jerry |
| # access = read-write |
| # managers = hubble, telescope |
| # } |
| # } |
| # |
| ############################################################## |
| # Format of the trap group |
| ############################################################## |
| # |
| # trap-community: a single SNMP community string that will be included |
| # in the traps sent to the hosts. |
| # |
| # hosts: a list of hosts to which the SNMP agent will send traps. |
| # |
| # An example of two trap community definitions for multiple hosts: |
| # trap = { |
| # { |
| # trap-community = public |
| # hosts = hubble, snowbell |
| # } |
| # { |
| # trap-community = private |
| # hosts = telescope |
| # } |
| # } |
| # |
| ############################################################ |
| # |
| # Update the community strings (public and private) below |
| # before copying this template file |
| # |
| # Common SNMP ACL Example |
| # ------------------------ |
| # |
| # o Only localhost can connect, and access rights |
| # are limited to read-only |
| # o Traps are sent to localhost only |
| # |
| # |
| # acl = { |
| # { |
| # communities = public, private |
| # access = read-only |
| # managers = localhost |
| # } |
| # } |
| # |
| # |
| # trap = { |
| # { |
| # trap-community = public |
| # hosts = localhost |
| # } |
| # } |