On Fri, 2 May 2008, Rafael Rodriguez wrote: > Permit/deny queries to SNMP daemon via the ACL. If your ACL only > permits 1.1.1.1, and 2.2.2.2 tries to get/set from SNMP, ACL drops it.
My interpretation of the question is a bit different. I thought Jeff asked if the SNMP agent itself was responsible for handling the SNMP ACL lookups and allowing/denying the traffic, or if another process does that job before the packets ever reach the SNMP agent. Unfortunately I don' know the answer off-hand, but it is an interesting question. Jeff: am I correct in my interpretation of your question? Thanks jms > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Fitzwater > Sent: Friday, May 02, 2008 17:06 > To: [email protected] > Subject: [c-nsp] snmp access list > > Does anybody know how a numbered standard ACL that is applied to snmp > traffic via commands shown below, actually works? > Does the SNMP process still get touched when a DENY is hit? > > > snmp-server community xxxx RO 99 > snmp-server community xxxx RW 99 > > > > Thanks for any info. > > > > Jeff Fitzwater > OIT Network Systems > Princeton University > > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
