Changing Default SNMP port in router

[prasad.gsmc]

Hi All,

Is it possible to make the router listen to ports other than 161 for SNMP ?? can ip port-map help in this... MY NMS SNMP port to be changed to non 161 due to security issue

[Joe Clarke]

This is not possible. You can send traps to non-default ports, but the SNMP agent will always bind to udp/161.

[niima]

Hi,

in that case, mind to share how in this image snmp port is 162 ?

[marce1000]

 - As stated already , not possible, in terms of security awareness , it would be a rightfull action for any snmp manager software to not trust an snmp service, which is not running on the designated standard snmp port.

M.

[niima]

so is it correct to say that you can make the router to listen on other ports other than 161 but it is not a advisable security practice?

The image is from cisco itself.

[marce1000]

 - CISCO (IOS) doesn't,  have that possibility (to change the snmp-listening-port); you can only do that in native unix (linux) systems, AND INDEED, it  can be considered as bad security practice. The 162 you see in the image is the trap destination port.

M.