Re: Source Address based Configuration Control in SNMP Agent

Am 15.12.18 um 15:11 schrieb prabu varadharajan:
> Dear All,
>
> As per my implementation, I would like to have only one Manager in my
> network who can configure my device, rest all can read the configuration.
> For example, even multiple NMS available in the network which can read the
> configuration(GET) where *only one NMS can write the configurations*(SET).
>
> This can be achieved by adding the following directive in snmpd.conf in
> case of SNMPv1 and SNMPv3,
>
> rwcommunity public 192.168.1.1
>
> But how can I achieve the same in case of SNMPv3? Please advise.
>
> If my Agent is configured in SNMPv3, the following directives will be
> available in the snmpd.conf file,
>
> createUser admin MD5 password AES password123
> rwuser admin priv
>
> I tried to do the source filtering whenever the agent receives a packet and
> able to achieve the same by updating the snmpUDPDomain.c and
> snmpUDPIPv6Domain.c files. But due to these changes, the Agent is not
> accepting GET and SET requests as it is not parsing as soon as it receives
> a packet.
>
> During the analysis, I get to know that the Agent does not perform any
> source based handling in case of SNMPv3 requests as it is already much
> secured. (Please correct me if I'm wrong)
>
> So can I have source address control for SNMPv1 and SNMPv2c alone?
>
>
>
> _______________________________________________
> Net-snmp-coders mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

Hi,

see the man pages of snmpd.conf and the section VACM in there.


Mit freundlichen Grüßen,

-- 

[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein

_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iF4EAREIAAYFAlwVZ5wACgkQsmtesqLuBDRDSwEAx5/yG5goza3zL4gUZ4Sgnogt
pn3owyD8d3uF8b3H0J0BAOzylmzyvewj4KKzaxpFHI2x+LpjFIucH/YPjIfVs15x
=g9TD
-----END PGP SIGNATURE-----