Re: How to deny access from only some hosts usinf vacm

"Dave Shield" <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <[email protected]>
On 14/01/2008, arijit <[email protected]> wrote:
>    What I was looking for was a way to specify a host ip address or a subnet ip
> address - which, I can specify in the com2sec directive!

You can specify the source host/subnet for SNMPv1/2c requests,
as part of mapping the community to an internal security name.

You can *not* specify a source host/subnet for SNMPv3 requests,
because the SNMPv3 user is automatically mapped to the
corresponding security name.   There is no hook for providing
source-specific mappings for SNMPv3 requests.

We could argue for hours about whether this would be a good
thing or a bad thing to support.  But the bottom line is that the
code does not include any such hook, so SNMPv3 requests
are an all-or-nothing affair.

Dave

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.