Q

In SNMPv1 and v2c, does it matter if I leave the community string set to public?

In SNMPv1 and v2c, does it matter if I leave the community string set to public?

In SNMPv1 and v2c, does it matter if I leave the community string set to public? I have left it at public and also

changed it to something else, but I still get the traps, so it seems it doesn't matter. What is it really for? In SNMPv1 and v2c the community string was used to authenticate the SNMP management station and SNMP agent. Here is how it is works:

Whenever any SNMP management station sends a request to get or set some data on an SNMP agent, it also sends the community string, which is configured in it along with the request. When the request reaches the SNMP agent, it tries to match this community string with the one you have defined in the agent. If the two strings match, then the SNMP agent answers the request. If not, it rejects the request as an unauthorized request. This way, you can stop unauthorized SNMP management stations from changing parameters on your SNMP agents. Now the important part – you should never leave the community string to public on any of your SNMP agents. This is the default community string, and this way you expose your SNMP agent to any SNMP management station. Anyone with an SNMP manager software installed on his/her PC can make changes to your SNMP agents. So it's always better to change the community string to something else.

This was first published in September 2004

Dig deeper on Network Hardware

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchSDN

SearchEnterpriseWAN

SearchUnifiedCommunications

SearchMobileComputing

SearchDataCenter

SearchITChannel

Close