02-24-2003 11:52 AM - edited 03-02-2019 05:20 AM
I have put the following SNMP with ACL restrictions in place on my IOS based devices and I want to know can I use the same configuration on my CatOS devices with the same results. Here is the config:
no snmp-server community public RO
no snmp-server community private RW
snmp-server community CoolString RO 21
snmp-server community BetterString RW 21
snmp-server host 10.10.11.34 private
snmp-server system-shutdown
access-list 21 permit 192.168.0.1
Thanks,
Richard Kennedy
Solved! Go to Solution.
02-24-2003 12:09 PM
You can use the "set ip permit" command to allow only certain ip addresses or ranges to access the switch for management purposes
02-24-2003 11:59 PM
If you want to use several community strings (public, CoolString, e.g.) at the same time you can use "set snmp community-ext" command (available since CatOS 7.5(1)).
But using IP permit you can just specify which IP addresses are allowed to send SNMP commands generally but not particular community strings as in IOS.
E.g.: "set ip permit 192.168.0.1 snmp" allows PC with 192.168.0.1 IP address to send any SNMP command without specifying the community string permitted as is with IOS
snmp-server community CoolString RO 21
snmp-server community BetterString RW 21
access-list 21 permit 192.168.0.1
Regards,
Milan
02-24-2003 12:09 PM
You can use the "set ip permit" command to allow only certain ip addresses or ranges to access the switch for management purposes
02-24-2003 11:59 PM
If you want to use several community strings (public, CoolString, e.g.) at the same time you can use "set snmp community-ext" command (available since CatOS 7.5(1)).
But using IP permit you can just specify which IP addresses are allowed to send SNMP commands generally but not particular community strings as in IOS.
E.g.: "set ip permit 192.168.0.1 snmp" allows PC with 192.168.0.1 IP address to send any SNMP command without specifying the community string permitted as is with IOS
snmp-server community CoolString RO 21
snmp-server community BetterString RW 21
access-list 21 permit 192.168.0.1
Regards,
Milan
02-25-2003 06:20 AM
Great, thank you to all that have replied.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide