Cisco Community
English
Register
Congratulate February's Spotlight Awardees. CLICK HERE
Register
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

298
Views
0
Helpful
1
Replies
Highlighted
jphilp
Beginner
Beginner
‎03-23-2020 12:16 PM
‎03-23-2020 12:16 PM

SNMPv3 Restrict access to certain MIBs

Hi, is it possible to restrict an SNMPv3 user to certain MIBs?

0 Helpful
Reply
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Damien Miller
VIP Advisor VIP Advisor
VIP Advisor
‎03-23-2020 02:34 PM
‎03-23-2020 02:34 PM

You can if you leverage SNMP views.  I'll admit that the documentation around it isn't great, but it is certainly doable. A lot of SNMP bugs have workarounds suggested leveraging views to exclude problem MIBs.

basic ex. 

SNMPv3:
snmp-server user psirt psirt-snmp v3
snmp-server group psirt-snmp v3 noauth read psirt
snmp-server view psirt cipSecSpiEntry excluded


View solution in original post

0 Helpful
Reply
1 REPLY 1
Highlighted
Damien Miller
VIP Advisor VIP Advisor
VIP Advisor
‎03-23-2020 02:34 PM
‎03-23-2020 02:34 PM

You can if you leverage SNMP views.  I'll admit that the documentation around it isn't great, but it is certainly doable. A lot of SNMP bugs have workarounds suggested leveraging views to exclude problem MIBs.

basic ex. 

SNMPv3:
snmp-server user psirt psirt-snmp v3
snmp-server group psirt-snmp v3 noauth read psirt
snmp-server view psirt cipSecSpiEntry excluded


View solution in original post

0 Helpful
Reply
Latest Contents
SecureX Frequently Asked Questions
Created by adisanka on 03-01-2021 08:33 AM
0
10
0
10
GeneralWhich Cisco Secure products include access to SecureX?What are the SecureX data retention/privacy policies?What is SSE?How can I unlink my smart account from SSE and link it to a new account?Do I have to use the same SSE region as the SecureX regio... view more
Bridge the security gap with Cisco Remote Secure Worker
Created by Kelli Glass on 02-26-2021 04:37 PM
0
0
0
0
More people are working remotely, and this increases the risk of security breaches and the difficulty in defending remote workers where they work and securing the devices they use. Learn about Cisco Remote Secure Worker solutions that verify workers, secu... view more
ISE Performance & Scale
Created by howon on 02-24-2021 08:26 PM
11
219
11
219
  GeneralWhich Cisco Secure products include access to SecureX?What are the SecureX data retention/privacy policies?What is SSE?How can I unlink my smart account from SSE and link it to a new account?Do I have to use the same SSE region as the Secur... view more
Detecting and Responding to the SolarWinds Infrastructure At...
Created by aligarci on 02-23-2021 08:19 AM
0
5
0
5
On December 8, FireEye reported that it had been compromised in a sophisticated supply chain attack: more specifically through the SolarWinds Orion IT monitoring and management software. The attackers leveraged business software updates in order to distr... view more
Arista CloudVision WiFi Dictionary and NAD Profile for ISE I...
Created by hslai on 02-21-2021 01:59 PM
0
10
0
10
Attached are the dictionary and NAD profile as described in Arista CloudVision WiFi Integration with Cisco ISE .
Content for Community-Ad