topic Re: Encrypting community string name. in Network Security

Encrypting community string name.

abahl — Fri, 21 Feb 2020 07:27:30 GMT

Greetings!

I have reduced the command privilege as follows:

"privilege exec level 1 show startup-config"

Now any user with level 1 access can see the startup configuration, but with that he is also able see the snmp community strings in clear text.

Enable passwords and secrets are encrypted by using following command:

"service password-encryption"

But this command does not encryt snmp community string.

I need to encrypt snmp community string in the show startup-config output.

Please advice.

Cordially,

Anuj

Re: Encrypting community string name.

jsivulka — Thu, 17 Jun 2004 12:19:06 GMT

I do not think the community string can be encrypted using service password-encryption. however, for security, you could attach a restrictive access-list to the command.

Re: Encrypting community string name.

rmushtaq — Sat, 19 Jun 2004 23:06:40 GMT

SNMP community strings cannot be encrypted. You can configure a SNMP community-based ACL to allow SNMP access to the device only from the trusted network management workstations. This will prevent the device being polled from non-trusted hosts.