snmp-agent community complexity-check disable

Function

The snmp-agent community complexity-check disable command disables the complexity check of a community name.

The undo snmp-agent community complexity-check disable command enables the complexity check of a community name.

By default, the device enables the complexity check of a community name.

Format

snmp-agent community complexity-check disable

undo snmp-agent community complexity-check disable

Parameters

None

Views

System view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

The device checks the complexity of community names in simple text rather than in ciphertext. The device has the following requirements for community name complexity:

The minimum length of a community name is determined by the set password min-length command. By default, a password contains 8 characters.
The community name includes at least two kinds of characters: uppercase letters, lowercase letters, numbers, and special characters (excluding ?).

Precautions

To ensure the security of SNMP community names, enable the complexity check for community names. If a community name fails the complexity check, the community name cannot be configured. The complexity check can also be disabled for a community name. However, if a community name is simple and does not meet complexity requirements, it is prone to be attacked and cracked by unauthorized users, which affects device security.

Example

# Disable the complexity check for community names.

<HUAWEI> system-view
[HUAWEI] snmp-agent community complexity-check disable