cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Cisco Community Designated VIP Class of 2020

312
Views
0
Helpful
2
Replies
Highlighted
Beginner

SNMP ACLs without applying on an interface

Experts

 

I was looking at some configurations on 3850 switches where the engineer has configured the standard and extended ACLs for SNMP, but surprisingly they were not applied to any of the ingress or egress interfaces.

 

Don't know what's the reason, please help me understanding this.

 

Kind Regards

Everyone's tags (4)
2 REPLIES 2
VIP Advisor

Re: SNMP ACLs without applying on an interface

Hi

Acl for snmp community are applied on snmp config. Can you share your snmp config and acl? The acl can be applied by using different command but usually it's done with snmp-server community.

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
VIP Expert

Re: SNMP ACLs without applying on an interface

As Francesco has already noted, a SNMP ACL can be assigned to SNMP community string. This then uses that ACL against a SNMP request using that community from any port.

You could use port ACLs, but then you couldn't have different ACLs per SNMP community.

Another advantage of attaching the ACLs to the SNMP community, it doesn't subject all other port traffic to the SNMP ACL. The SNMP ACL is only applied to traffic using a specific SNMP community to the device.
CreatePlease to create content
Content for Community-Ad