1# ---------------------------------------------------------------------- 2# Template for SNMP Access Control List File 3# 4# o Copy this template to snmp.acl 5# o Set access control for SNMP support 6# o Change the permission of snmp.acl to be read-only 7# by the owner. 8# 9# See below for the location of snmp.acl file. 10# ---------------------------------------------------------------------- 11 12############################################################ 13# SNMP Access Control List File 14############################################################ 15# 16# Default location of this file is $JRE/lib/management/snmp.acl. 17# You can specify an alternate location by specifying a property in 18# the management config file $JRE/lib/management/management.properties 19# or by specifying a system property (See that file for details). 20# 21 22 23############################################################## 24# File permissions of the snmp.acl file 25############################################################## 26# 27# Since there are cleartext community strings stored in this file, 28# this ACL file must be readable by ONLY the owner, 29# otherwise the program will exit with an error. 30# 31############################################################## 32# Format of the acl group 33############################################################## 34# 35# communities: a list of SNMP community strings to which the 36# access control applies separated by commas. 37# 38# access: either "read-only" or "read-write". 39# 40# managers: a list of hosts to be granted the access rights. 41# Each can be expressed as any one of the following: 42# - hostname: hubble 43# - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82 44# - ip v4 and v6 netmask prefix notation: 123.456.789.0/24, 45# fe80::a00:20ff:fe9b:ea82/64 46# see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt) 47# 48# An example of two community groups for multiple hosts: 49# acl = { 50# { 51# communities = public, private 52# access = read-only 53# managers = hubble, snowbell, nanak 54# } 55# { 56# communities = jerry 57# access = read-write 58# managers = hubble, telescope 59# } 60# } 61# 62############################################################## 63# Format of the trap group 64############################################################## 65# 66# trap-community: a single SNMP community string that will be included 67# in the traps sent to the hosts. 68# 69# hosts: a list of hosts to which the SNMP agent will send traps. 70# 71# An example of two trap community definitions for multiple hosts: 72# trap = { 73# { 74# trap-community = public 75# hosts = hubble, snowbell 76# } 77# { 78# trap-community = private 79# hosts = telescope 80# } 81# } 82# 83############################################################ 84# 85# Update the community strings (public and private) below 86# before copying this template file 87# 88# Common SNMP ACL Example 89# ------------------------ 90# 91# o Only localhost can connect, and access rights 92# are limited to read-only 93# o Traps are sent to localhost only 94# 95# 96# acl = { 97# { 98# communities = public, private 99# access = read-only 100# managers = localhost 101# } 102# } 103# 104# 105# trap = { 106# { 107# trap-community = public 108# hosts = localhost 109# } 110# } 111