Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: Restrict SNMP V3 requests from certain devices - CVE-2008-0960

$
0
0

Thanks, I've had a look but can't see how the link between the community name in snmp v1 links to the snmp v 3 VACM.

 

I have the following config, can you advise what I have wrong? I am trying to restrict snmp v3 access to just allow 1.2.3.4 in this example.

 

set snmpv3 view name All
set snmpv3 view All oid .1 mask ff type include
set snmpv3 access group ReadOnly sec-model usm sec-level priv read All
set snmpv3 access group ReadWrite sec-model usm sec-level priv read All write All
set snmpv3 user read auth sha auth-pass 12345 priv aes128 priv-pass 54321
set snmpv3 user write auth sha auth-pass 23456 priv aes128 priv-pass 65432
set snmpv3 group-mapping sec-model usm user read group ReadOnly
set snmpv3 group-mapping sec-model usm user write group ReadWrite


set snmpv3 community ReadOnly tag ReadOnly

 

set snmp community "ReadOnly" Read-Write Trap-on traffic version v1
set snmp host "ReadOnly" 1.2.3.4/32 src-interface bgroup0 trap v1


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>