| [818] | 1 | # ----------------------------------------------------------------------
 | 
|---|
 | 2 | #           Template for SNMP Access Control List File
 | 
|---|
 | 3 | #
 | 
|---|
 | 4 | # o Copy this template to snmp.acl
 | 
|---|
 | 5 | # o Set access control for SNMP support
 | 
|---|
 | 6 | # o Change the permission of snmp.acl to be read-only
 | 
|---|
 | 7 | #   by the owner.
 | 
|---|
 | 8 | #
 | 
|---|
 | 9 | # See below for the location of snmp.acl file.
 | 
|---|
 | 10 | # ----------------------------------------------------------------------
 | 
|---|
 | 11 | 
 | 
|---|
 | 12 | ############################################################
 | 
|---|
 | 13 | #            SNMP Access Control List File  
 | 
|---|
 | 14 | ############################################################
 | 
|---|
 | 15 | #
 | 
|---|
 | 16 | # Default location of this file is $JRE/lib/management/snmp.acl.
 | 
|---|
 | 17 | # You can specify an alternate location by specifying a property in 
 | 
|---|
 | 18 | # the management config file $JRE/lib/management/management.properties
 | 
|---|
 | 19 | # or by specifying a system property (See that file for details).
 | 
|---|
 | 20 | #
 | 
|---|
 | 21 | 
 | 
|---|
 | 22 | 
 | 
|---|
 | 23 | ##############################################################
 | 
|---|
 | 24 | #        File permissions of the snmp.acl file
 | 
|---|
 | 25 | ##############################################################
 | 
|---|
 | 26 | # 
 | 
|---|
 | 27 | #      Since there are cleartext community strings stored in this file,
 | 
|---|
 | 28 | #      this ACL file must be readable by ONLY the owner,
 | 
|---|
 | 29 | #      otherwise the program will exit with an error. 
 | 
|---|
 | 30 | #
 | 
|---|
 | 31 | ##############################################################
 | 
|---|
 | 32 | #               Format of the acl group
 | 
|---|
 | 33 | ##############################################################
 | 
|---|
 | 34 | #
 | 
|---|
 | 35 | # communities: a list of SNMP community strings to which the
 | 
|---|
 | 36 | #              access control applies separated by commas.
 | 
|---|
 | 37 | #
 | 
|---|
 | 38 | # access: either "read-only" or "read-write".
 | 
|---|
 | 39 | #
 | 
|---|
 | 40 | # managers: a list of hosts to be granted the access rights.
 | 
|---|
 | 41 | #    Each can be expressed as any one of the following:
 | 
|---|
 | 42 | #    - hostname: hubble
 | 
|---|
 | 43 | #    - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82
 | 
|---|
 | 44 | #    - ip v4 and v6 netmask prefix notation: 123.456.789.0/24, 
 | 
|---|
 | 45 | #         fe80::a00:20ff:fe9b:ea82/64  
 | 
|---|
 | 46 | #      see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt)
 | 
|---|
 | 47 | #
 | 
|---|
 | 48 | # An example of two community groups for multiple hosts:
 | 
|---|
 | 49 | #    acl = {
 | 
|---|
 | 50 | #     {
 | 
|---|
 | 51 | #       communities = public, private
 | 
|---|
 | 52 | #       access = read-only
 | 
|---|
 | 53 | #       managers = hubble, snowbell, nanak
 | 
|---|
 | 54 | #     }
 | 
|---|
 | 55 | #     {
 | 
|---|
 | 56 | #       communities = jerry
 | 
|---|
 | 57 | #       access = read-write
 | 
|---|
 | 58 | #       managers = hubble, telescope
 | 
|---|
 | 59 | #     }
 | 
|---|
 | 60 | #    }
 | 
|---|
 | 61 | # 
 | 
|---|
 | 62 | ##############################################################
 | 
|---|
 | 63 | #                   Format of the trap group
 | 
|---|
 | 64 | ##############################################################
 | 
|---|
 | 65 | #
 | 
|---|
 | 66 | # trap-community: a single SNMP community string that will be included
 | 
|---|
 | 67 | #                 in  the traps sent to the hosts.
 | 
|---|
 | 68 | #
 | 
|---|
 | 69 | # hosts: a list of hosts to which the SNMP agent will send traps.
 | 
|---|
 | 70 | #
 | 
|---|
 | 71 | # An example of two trap community definitions for multiple hosts:
 | 
|---|
 | 72 | #    trap = {
 | 
|---|
 | 73 | #      {
 | 
|---|
 | 74 | #        trap-community = public
 | 
|---|
 | 75 | #        hosts = hubble, snowbell
 | 
|---|
 | 76 | #      }
 | 
|---|
 | 77 | #      {
 | 
|---|
 | 78 | #        trap-community = private
 | 
|---|
 | 79 | #        hosts = telescope
 | 
|---|
 | 80 | #      }
 | 
|---|
 | 81 | #    }
 | 
|---|
 | 82 | #
 | 
|---|
 | 83 | ############################################################
 | 
|---|
 | 84 | #
 | 
|---|
 | 85 | #  Update the community strings (public and private) below
 | 
|---|
 | 86 | #  before copying this template file
 | 
|---|
 | 87 | #       
 | 
|---|
 | 88 | # Common SNMP ACL Example
 | 
|---|
 | 89 | # ------------------------
 | 
|---|
 | 90 | #
 | 
|---|
 | 91 | # o Only localhost can connect, and access rights
 | 
|---|
 | 92 | #   are limited to read-only
 | 
|---|
 | 93 | # o Traps are sent to localhost only
 | 
|---|
 | 94 | #
 | 
|---|
 | 95 | #
 | 
|---|
 | 96 | # acl = {
 | 
|---|
 | 97 | #  {
 | 
|---|
 | 98 | #    communities = public, private
 | 
|---|
 | 99 | #    access = read-only
 | 
|---|
 | 100 | #    managers = localhost
 | 
|---|
 | 101 | #  }
 | 
|---|
 | 102 | # }
 | 
|---|
 | 103 | # 
 | 
|---|
 | 104 | # 
 | 
|---|
 | 105 | # trap = {
 | 
|---|
 | 106 | #   {
 | 
|---|
 | 107 | #     trap-community = public
 | 
|---|
 | 108 | #     hosts = localhost 
 | 
|---|
 | 109 | #   }
 | 
|---|
 | 110 | # }
 | 
|---|