Encrypting community string name.

[abahl]

Greetings!

I have reduced the command privilege as follows:

"privilege exec level 1 show startup-config"

Now any user with level 1 access can see the startup configuration, but with that he is also able see the snmp community strings in clear text.

Enable passwords and secrets are encrypted by using following command:

"service password-encryption"

But this command does not encryt snmp community string.

I need to encrypt snmp community string in the show startup-config output.

Please advice.

Cordially,

Anuj

[jsivulka]

I do not think the community string can be encrypted using service password-encryption. however, for security, you could attach a restrictive access-list to the command.

[rmushtaq]

SNMP community strings cannot be encrypted. You can configure a SNMP community-based ACL to allow SNMP access to the device only from the trusted network management workstations. This will prevent the device being polled from non-trusted hosts.