SNMP ACL

[davidhud23]

I don't understand how the acl's for snmp function and where they are placed.  Could you explain this for me.

David

[cmarva · Accepted solution]

the ACL is placed on the string, for instance:

snmp-server community yaddayadda RO 20

access-list 20 contains the hosts that are allowed to poll this device. OR,

snmp-server community blahblah RW 21

access-list 21 is the list of hosts that are allowed to send snmp write commands to this device.

Hope this helps, chris

[davidhud23 · Accepted solution]

thanks - it was not clear from my study sources

[balaji.bandi]

you need apply in the Switch you want to allow only certain SNMP Server to poll snmp query as read only and some use for Readwrite as example below :

access-list 11 permit 192.168.1.0 0.0.0.255
access-list 11 permit host 11.1.1.1
access-list 11 deny any
snmp-server community bbread ro 11
access-list 12 permit 172.16.1.0 0.0.0.255
snmp-server community bbwrite rw 12