|
Home > Archive > alt.certification.cisco > August 2002 > SNMP - How to seperate which Int can be queried ?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
SNMP - How to seperate which Int can be queried ?
|
|
| Roble Mumin 2002-08-21, 3:28 pm |
| We use a c2611 Router with two uplinks to the i-net. One of the ISP's would
like to get RO SNMP access to check his connection.
The problem i currently have is to sperate the informations that provide via
SNMP. If i give him the current RO community string he will be able to
monitor the other uplink as well. Does any one know a best practice to solve
this problem ? I want ISP A to monitor serial 0/0 only and ISP B to monitor
eth 0/0 only, both with different community names.
What i did so far is define ip's in an access list and bind it to a certain
SNMP commmunity.
E.G:
access-list 10 192.168.1.0
access-list 10 192.168.2.0 0.0.0.63
snmp-server community check,e RO 10
Can i configure which Interface responds to which community on int level ?
Can it be done by access list's ?
Greetings
Roble
| |
| Hansang Bae 2002-08-21, 11:29 pm |
| In article <ak0r3j$2rr$1@newsreader2.netcologne.de>, roble.mumin@NO-
SPAMnetcologne.de says...
> We use a c2611 Router with two uplinks to the i-net. One of the ISP's would
> like to get RO SNMP access to check his connection.
> The problem i currently have is to sperate the informations that provide via
> SNMP. If i give him the current RO community string he will be able to
> monitor the other uplink as well. Does any one know a best practice to solve
> this problem ? I want ISP A to monitor serial 0/0 only and ISP B to monitor
> eth 0/0 only, both with different community names.
>
> What i did so far is define ip's in an access list and bind it to a certain
> SNMP commmunity.
>
> E.G:
>
> access-list 10 192.168.1.0
> access-list 10 192.168.2.0 0.0.0.63
>
> snmp-server community check,e RO 10
>
> Can i configure which Interface responds to which community on int level ?
> Can it be done by access list's ?
I don't know if it can be done on an interface level. Maybe you can create
an ACL that denies ISP A from accessing your E0/0?
--
hsb
"Somehow I imagined this experience would be more rewarding" Calvin
******************************
******************************
********
Due to the volume of email that I receive, I may not not be able to
reply to emails sent to my account. Please post a followup instead.
*************** USE ROT13 TO SEE MY EMAIL ADDRESS ****************
******************************
******************************
********
| |
| Hansang Bae 2002-08-22, 12:29 am |
| In article <ak0r3j$2rr$1@newsreader2.netcologne.de>, roble.mumin@NO-
SPAMnetcologne.de says...
> We use a c2611 Router with two uplinks to the i-net. One of the ISP's would
> like to get RO SNMP access to check his connection.
> The problem i currently have is to sperate the informations that provide via
> SNMP. If i give him the current RO community string he will be able to
> monitor the other uplink as well. Does any one know a best practice to solve
> this problem ? I want ISP A to monitor serial 0/0 only and ISP B to monitor
> eth 0/0 only, both with different community names.
>
> What i did so far is define ip's in an access list and bind it to a certain
> SNMP commmunity.
>
> E.G:
>
> access-list 10 192.168.1.0
> access-list 10 192.168.2.0 0.0.0.63
>
> snmp-server community check,e RO 10
>
> Can i configure which Interface responds to which community on int level ?
> Can it be done by access list's ?
I don't know if it can be done on an interface level. Maybe you can create
an ACL that denies ISP A from accessing your E0/0?
--
hsb
"Somehow I imagined this experience would be more rewarding" Calvin
******************************
******************************
********
Due to the volume of email that I receive, I may not not be able to
reply to emails sent to my account. Please post a followup instead.
*************** USE ROT13 TO SEE MY EMAIL ADDRESS ****************
******************************
******************************
********
|
|
|
|
|