Use the RO keyword of the snmp-server community command to provide nonprivileged access to your routers via SNMP. The following configuration command sets the agent in the router to allow only SNMP GETREQUEST and GETNEXTREQUEST messages that are sent with the community string "public":
snmp-server community public RO 1
You can also specify a list of IP addresses that are allowed to send messages to the router using the access-list option with the snmp-server community command. In the following configuration example, only hosts 184.108.40.206 and 220.127.116.11 are allowed nonprivileged-mode SNMP access to the router:
access-list 1 permit 18.104.22.168 access-list 1 permit 22.214.171.124 snmp-server community public RO 1
Was this article helpful?