Does view iso weaken security?

[gwcrook]

snmp-server view iso iso included

snmp-server community comm_ro view iso RO

snmp-server community comm_rw view iso RW

Does the view iso create a weak spot in the security of the wireless network since hackers know the view exists on all AP's? If the snmp community is entered in WLSE for each access point would that allow for radio management or does the iso view have to exist? Can view iso be exploited? I do not know how to test for an snmp exploit. My instinct tells me that any common item included in a device configuration weakens the security for that device.

[paddyxdoyle]

Hi,

If you are concerend about SNMP security you can tie SNMP gets/sets etc down to a specific IP address of your NMS server. Plus you can specify which IP addresses traps will be sent from your AP

eg.

myap(config)#snmp-server community mystring ro ?

<1-99> Std IP accesslist allowing access with this community string

<1300-1999> Expanded IP accesslist allowing access with this community

string

HTH

PD