Basic snmp questions...

[admin_2]

Hello,

Is it recommended that an organization create there own public and community strings? Or do most organizations stay with the defaults?

Also, can you run with more than one set of snmp strings?

TIA,

Gary

[jboake]

Creat your own. This is a MUST. Imagine if we all knew each others strings. You can use more than one set on Cisco devices and it is also recommended that you put a Access-List inplace restricting who can read and write to your devices.

[patrsup]

Most established organizations use their own as leaving the defaults allows a person to reconfigure equipment on the network (if he knows how). Usually changing case and numbers make a secure community string.

You can have more than one, but if one of the sets is the default, it will allow someone to find out the other.

Hope this helps

pat

[rmushtaq]

SNMP strings are like passwords. Not a good idea to use generic public/private which are mostly used as examples in docs. Use your own strings. In router IOS, you can configure multiple SNMP RO/RW strings using the snmp-server community command.