Problem with source restrictions in snmpd.conf

Eric Blau <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
Hello all,

I'm having a problem with Net-SNMP 5.4.1.pre1 with source IP address 
restrictions using the "authcommunity" option.  The man page shows the 
ability to specify a source address:

authcommunity TYPES COMMUNITY [SOURCE [OID | -V VIEW [CONTEXT]]]

Here's what my snmpd.conf config file looks like:

---
master agentx
com2sec notConfigUser  default       public
com2sec isConfigUser   default       private

group   notConfigGroup v1            notConfigUser
group   notConfigGroup v2c           notConfigUser
group   isConfigGroup  v1            isConfigUser
group   isConfigGroup  v2c           isConfigUser

view    systemview    included   .1.3.6.1.2.1.1
view    systemview    included   .1.3.6.1.2.1.25.1.1
view    fullview      included   .1

access  notConfigGroup ""      any       noauth    exact  systemview 
none none
access  isConfigGroup  ""      any       noauth    exact  fullview 
fullview none

engineID 0x800001430c0030482dc316
master yes
agentXPerms 777
agentaddress 161
view    fullview      excluded    .1.3.6.1.4.1.100
view    myview    included    .1.3.6.1.4.1.100
createUser eblau SHA testing123 AES testing123
authcommunity read mycomm 10.25.60.6 -V myview
authcommunity read mycomm 192.168.66.56 -V myview
authcommunity read mycomm 127.0.0.1 -V myview
authuser read eblau auth -V myview
trapcommunity mycomm
---

and here are the errors I get in snmpd.log when I try to start the 
master agent:

---
/etc/snmp/snmpd_tklc.conf: line 24: Error: Address family for hostname 
not supported
/etc/snmp/snmpd_tklc.conf: line 25: Error: Address family for hostname 
not supported
/etc/snmp/snmpd_tklc.conf: line 26: Error: Address family for hostname 
not supported
---

These are the lines containing the authcommunity directive.  Why is 
Net-SNMP not accepting my authcommunity directive with the source 
address restriction?

I've tried specifying the IP address subnet (as 10.25.60.6/255.255.255.0 
and 10.25.60.6/32) and with and without the "udp:" prefix to specify 
IPv4 UDP, but nothing seems to work.

With these errors snmpd does start, but the source address restrictions 
are ignored.

Thanks in advance!

Regards,
Eric




-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.