Re: Seperate Read-Write Communities

Michael I Schwartz (mschwart@du.edu)
Sun, 30 Jun 1996 00:40:44 -0600

At 08:42 AM 6/29/96 +0000, you wrote:
>On Jun 28, 4:11pm, Alan Hannan wrote:
>} ] > IS there a way to open a session with seperate read and write
>} ] > communities in Scotty? Currently I open 2 sessions to each
>}
>} ] No. However, I see the practical value of your suggestion. It would
>} ] require to make the SNMP session structure a bit more complex
>} ]
>} ] -community -writecommunity (SNMPv1/SNMPv2C)
>} ] -password -writepassword (SNMPv2U)
>}
>} Actually, I've given this matter a lot of thought, both wrt
>} read/write communities, and also separate communities.
>}
>} I'd very much like to see the SNMP read string and SNMP write
>} string be an 'attribute' of the node. Likewise, the default would
>} still exist, and if no 'SNMP Read' attribute, it used that.
>}-- End of excerpt from Alan Hannan
>
>I spoke to Juergen about this some time ago and my thoughts were the same.
>This allows then full flexibility. ie... have a global default
>RO community, a default RW community, which can be overridden by individual
>node attributes - also held as seperate snmp_ro and snmp_rw variables.
>
>(I assume that we are talking of the same thing ?)

Hmmm. I sense in this thread a disconnect between the "scotty/tnm" piece and
the tkined piece.
The tkined piece might store the community name as an attribute, while
Juergen's answer is one about the scotty/tnm piece.

Juergen's suggested options to creation of the snmp session support the
tkined node--a command could, for each node, create an snmp session with the
proper community/passwords to perform its action, and then destroy the
session. If the reconfiguration of communities/passwords are substantially
faster than creation/destruction of a session (which is relatively slow), of
course that strategy should be used instead.

I suppose there are others like myself who program mostly in the scotty
arena and play only a little with the tkined.
Michael I. Schwartz "Be very quiet...for it goes
mschwartz@mmc.com without saying"
The Phantom Tollbooth