SNMPv1 and SNMPv2c authenticate managers and agents with a shared password called a community string. The community determines whether requests can read or modify a managed device. section 6.3.1 section 6.4
Use two community types to control SNMP operations:
- RO permits Get, GetNext, and GetBulk requests but rejects Set requests. section 6.3.1
- RW permits both read operations and Set requests that modify the managed device. section 6.3.1
- An ACL can restrict each community string to permitted NMS sources. section 6.3.1
Cisco IOS configuration
Configure communities with `snmp-server community password123 RO` and `snmp-server community password456 RW`. Enable traps with `snmp-server enable traps`, then identify the NMS with `snmp-server host 192.168.1.10 version 2c password789`.
