snmp using access-lists and loopback interface 1

[Despairsquid]

I'm setting up snmp on cisco2621 router - can I attach an access-list to the loopback interface or can I point snmp at an access-list without attaching to a particular interface?

Any help most appreciated

cheers

 

[mrhunt]

You don't need to apply an access-list to an interface to accomplish this (although you could, but I prefer to work w/ a scalpel, not a sledgehammer...) I prefer to apply an access-list to the community.

the standard snmp command to set a Read Only community of public would be :

snmp-server community public RO

simply change the above command to

snmp-server community public RO 5

and access-list 5 would be applied to any incoming snmp request w/ a community of public.

So if I only wanted the 200.150.151.0/24 network to be able to querry my router using the public read only community, I'd have the following lines to create my access list

access-list 5 permit 200.150.151.0 0.0.0.255
access-list 5 deny any

For more info see

http://www.cisco.com/univercd/cc/td/doc/cisintwk/ics/cs003.htm#xtocid344214

(watch that word wrap)

 

[Despairsquid]

Thanks for clearing that question for me

kind regards

Despairsquid