[c-nsp] How to disable ILMI/SNMP CSCvs33325
Hank Nussbacher via cisco-nsp <[email protected]>
| Newsgroups | gmane.network.nsp.cisco |
|---|---|
| Message-ID | <[email protected]> |
Recently Shodan has been showing how it probes all our IOS-XE routers via SNMP even though we have an ACL on all our SNMP. We then found that there is a bugid on the issue (ILMI can't be blocked by ACL): CSCvs33325 As well as an internal TAC bugid: CSCdp11863 Basically, none of the commands offered by these bugids or via the TAC case we opened have worked to block ILMI. So we tried to use control-plane blocking as we do on our IOS-XR routers, but we have not managed to get that to work. Does anyone have an actual tried and working solution to blocking ILMI on IOS-XE? control-plane or other command? Thanks, Hank _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/