Uh, yeah. You could also lock down the SNMP service to your NOC
subnet(s), etc.
On 3/17/2015 10:42 PM, Kurt Fankhauser wrote:
I too have SNMP enabled on all 2011's. Should I be changing the
community string to something other than public?
Kurt Fankhauser
Wavelinc Communications
P.O. Box 126
Bucyrus, OH 44820
http://www.wavelinc.com <http://www.wavelinc.com/>
tel. 419-562-6405
fax. 419-617-0110
On Tue, Mar 17, 2015 at 10:48 PM, Ken Hohhof <[email protected]
<mailto:[email protected]>> wrote:
Why do you say that? How do you monitor them without SNMP? You
could certainly apply firewall rules to port 161 to restrict
access if you are worried about DoS attacks or community string
dictionary attacks.
Is your comment specifically about the 2011? I have SNMP enabled
on all of mine.
*From:* John Woodfield <mailto:[email protected]>
*Sent:* Tuesday, March 17, 2015 9:42 PM
*To:* [email protected] <mailto:[email protected]>
*Subject:* Re: [AFMUG] Inexpensive but great router
+1 on 2011's but don't enable SNMP on them
John Woodfield, President
Delmarva WiFi Inc.
410-870-WiFi
-----Original Message-----
From: "Brett A Mansfield" <[email protected]
<mailto:[email protected]>>
Sent: Tuesday, March 17, 2015 9:21pm
To: [email protected] <mailto:[email protected]>
Subject: [AFMUG] Inexpensive but great router
Anyone have a suggestion on an inexpensive but really good router
that can handle routing 4 VLANs and OSPF? I need to replace my
EdgeRouters that panic weekly. I have one at each pop.
Thank you,
Brett A Mansfield
