1 # ----------------------------------------------------------------------
   2 #           Template for SNMP Access Control List File
   3 #
   4 # o Copy this template to snmp.acl
   5 # o Set access control for SNMP support
   6 # o Change the permission of snmp.acl to be read-only
   7 #   by the owner.
   8 #
   9 # See below for the location of snmp.acl file.
  10 # ----------------------------------------------------------------------
  11 
  12 ############################################################
  13 #            SNMP Access Control List File
  14 ############################################################
  15 #
  16 # Default location of this file is $JRE/conf/management/snmp.acl.
  17 # You can specify an alternate location by specifying a property in
  18 # the management config file $JRE/conf/management/management.properties
  19 # or by specifying a system property (See that file for details).
  20 #
  21 
  22 
  23 ##############################################################
  24 #        File permissions of the snmp.acl file
  25 ##############################################################
  26 #
  27 #      Since there are cleartext community strings stored in this file,
  28 #      this ACL file must be readable by ONLY the owner,
  29 #      otherwise the program will exit with an error.
  30 #
  31 ##############################################################
  32 #               Format of the acl group
  33 ##############################################################
  34 #
  35 # communities: a list of SNMP community strings to which the
  36 #              access control applies separated by commas.
  37 #
  38 # access: either "read-only" or "read-write".
  39 #
  40 # managers: a list of hosts to be granted the access rights.
  41 #    Each can be expressed as any one of the following:
  42 #    - hostname: hubble
  43 #    - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82
  44 #    - ip v4 and v6 netmask prefix notation: 123.456.789.0/24,
  45 #         fe80::a00:20ff:fe9b:ea82/64
  46 #      see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt)
  47 #
  48 # An example of two community groups for multiple hosts:
  49 #    acl = {
  50 #     {
  51 #       communities = public, private
  52 #       access = read-only
  53 #       managers = hubble, snowbell, nanak
  54 #     }
  55 #     {
  56 #       communities = jerry
  57 #       access = read-write
  58 #       managers = hubble, telescope
  59 #     }
  60 #    }
  61 #
  62 ##############################################################
  63 #                   Format of the trap group
  64 ##############################################################
  65 #
  66 # trap-community: a single SNMP community string that will be included
  67 #                 in  the traps sent to the hosts.
  68 #
  69 # hosts: a list of hosts to which the SNMP agent will send traps.
  70 #
  71 # An example of two trap community definitions for multiple hosts:
  72 #    trap = {
  73 #      {
  74 #        trap-community = public
  75 #        hosts = hubble, snowbell
  76 #      }
  77 #      {
  78 #        trap-community = private
  79 #        hosts = telescope
  80 #      }
  81 #    }
  82 #
  83 ############################################################
  84 #
  85 #  Update the community strings (public and private) below
  86 #  before copying this template file
  87 #
  88 # Common SNMP ACL Example
  89 # ------------------------
  90 #
  91 # o Only localhost can connect, and access rights
  92 #   are limited to read-only
  93 # o Traps are sent to localhost only
  94 #
  95 #
  96 # acl = {
  97 #  {
  98 #    communities = public, private
  99 #    access = read-only
 100 #    managers = localhost
 101 #  }
 102 # }
 103 #
 104 #
 105 # trap = {
 106 #   {
 107 #     trap-community = public
 108 #     hosts = localhost
 109 #   }
 110 # }