1 | # ----------------------------------------------------------------------
|
---|
2 | # Template for SNMP Access Control List File
|
---|
3 | #
|
---|
4 | # o Copy this template to snmp.acl
|
---|
5 | # o Set access control for SNMP support
|
---|
6 | # o Change the permission of snmp.acl to be read-only
|
---|
7 | # by the owner.
|
---|
8 | #
|
---|
9 | # See below for the location of snmp.acl file.
|
---|
10 | # ----------------------------------------------------------------------
|
---|
11 |
|
---|
12 | ############################################################
|
---|
13 | # SNMP Access Control List File
|
---|
14 | ############################################################
|
---|
15 | #
|
---|
16 | # Default location of this file is $JRE/lib/management/snmp.acl.
|
---|
17 | # You can specify an alternate location by specifying a property in
|
---|
18 | # the management config file $JRE/lib/management/management.properties
|
---|
19 | # or by specifying a system property (See that file for details).
|
---|
20 | #
|
---|
21 |
|
---|
22 |
|
---|
23 | ##############################################################
|
---|
24 | # File permissions of the snmp.acl file
|
---|
25 | ##############################################################
|
---|
26 | #
|
---|
27 | # Since there are cleartext community strings stored in this file,
|
---|
28 | # this ACL file must be readable by ONLY the owner,
|
---|
29 | # otherwise the program will exit with an error.
|
---|
30 | #
|
---|
31 | ##############################################################
|
---|
32 | # Format of the acl group
|
---|
33 | ##############################################################
|
---|
34 | #
|
---|
35 | # communities: a list of SNMP community strings to which the
|
---|
36 | # access control applies separated by commas.
|
---|
37 | #
|
---|
38 | # access: either "read-only" or "read-write".
|
---|
39 | #
|
---|
40 | # managers: a list of hosts to be granted the access rights.
|
---|
41 | # Each can be expressed as any one of the following:
|
---|
42 | # - hostname: hubble
|
---|
43 | # - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82
|
---|
44 | # - ip v4 and v6 netmask prefix notation: 123.456.789.0/24,
|
---|
45 | # fe80::a00:20ff:fe9b:ea82/64
|
---|
46 | # see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt)
|
---|
47 | #
|
---|
48 | # An example of two community groups for multiple hosts:
|
---|
49 | # acl = {
|
---|
50 | # {
|
---|
51 | # communities = public, private
|
---|
52 | # access = read-only
|
---|
53 | # managers = hubble, snowbell, nanak
|
---|
54 | # }
|
---|
55 | # {
|
---|
56 | # communities = jerry
|
---|
57 | # access = read-write
|
---|
58 | # managers = hubble, telescope
|
---|
59 | # }
|
---|
60 | # }
|
---|
61 | #
|
---|
62 | ##############################################################
|
---|
63 | # Format of the trap group
|
---|
64 | ##############################################################
|
---|
65 | #
|
---|
66 | # trap-community: a single SNMP community string that will be included
|
---|
67 | # in the traps sent to the hosts.
|
---|
68 | #
|
---|
69 | # hosts: a list of hosts to which the SNMP agent will send traps.
|
---|
70 | #
|
---|
71 | # An example of two trap community definitions for multiple hosts:
|
---|
72 | # trap = {
|
---|
73 | # {
|
---|
74 | # trap-community = public
|
---|
75 | # hosts = hubble, snowbell
|
---|
76 | # }
|
---|
77 | # {
|
---|
78 | # trap-community = private
|
---|
79 | # hosts = telescope
|
---|
80 | # }
|
---|
81 | # }
|
---|
82 | #
|
---|
83 | ############################################################
|
---|
84 | #
|
---|
85 | # Update the community strings (public and private) below
|
---|
86 | # before copying this template file
|
---|
87 | #
|
---|
88 | # Common SNMP ACL Example
|
---|
89 | # ------------------------
|
---|
90 | #
|
---|
91 | # o Only localhost can connect, and access rights
|
---|
92 | # are limited to read-only
|
---|
93 | # o Traps are sent to localhost only
|
---|
94 | #
|
---|
95 | #
|
---|
96 | # acl = {
|
---|
97 | # {
|
---|
98 | # communities = public, private
|
---|
99 | # access = read-only
|
---|
100 | # managers = localhost
|
---|
101 | # }
|
---|
102 | # }
|
---|
103 | #
|
---|
104 | #
|
---|
105 | # trap = {
|
---|
106 | # {
|
---|
107 | # trap-community = public
|
---|
108 | # hosts = localhost
|
---|
109 | # }
|
---|
110 | # }
|
---|