[AusNOG] Cisco SNMP on a certain line card

[Mark Tees]

I believe the other approach may be using SNMP views to limit access to specific MIB variables.

A quick Google search shows this which you could possibly apply with a little variation to limiting access to certain interfaces.

http://fengnet.com/book/Cisco.IOS.Cookbook.2nd/I_0596527225_CHP_17_SECT_8.html


On 11/07/2012, at 8:42 AM, Jared Hirst <jared.hirst at serversaustralia.com.au> wrote:

> Hi Ian,
> 
> Nathan clarified more what I was after, but I will try your suggestion and let you know.
> 
> Kind Regards,
> 
> Jared Hirst
> Servers Australia Pty Ltd
> Phone: 1300 788 862
> www.serversaustralia.com.au
> 
> On Jul 11, 2012 1:53 AM, "Nathan Brookfield" <nathan.brookfield at serversaustralia.com.au> wrote:
> Hi Ian;
> 
>  
> 
> Very true comments, I think the issue here is that Jared is trying to limit an SNMP community from only being able to access certain ports or a certain Sup6 card and not having access to pole other parts of the device.
> 
>  
> 
> A better rephrase of the question would be ‘How can I limit a community or an SNMP peer to a certain Sup6’ if at all possible?
> 
>  
> 
> Many Thanks;
> 
> Nathan
> 
>  
> 
> From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Ian Henderson
> Sent: Tuesday, 10 July 2012 10:54 PM
> To: Jared Hirst
> Cc: ausnog at lists.ausnog.net
> Subject: Re: [AusNOG] Cisco SNMP on a certain line card
> 
>  
> 
> On 10/07/2012, at 10:43 PM, Jared Hirst wrote:
> 
> 
> 
> 
> I have a supervisor 6 card and I am wondering how I can do SNMP on a certain line card, we have 5 Gbe switches in the one chassis and I want to be able to just export SNMP for one of the switches in the ‘stack’ does anyone know of any way to do this?
> 
>  
> 
> You mentioned a Sup6 which implies a 4500. These don't work like a stack of 3750s or similar - its just one big switch. SNMP against the IP address of the supervisor, then use code/text utils/whatever to grab the card you're after matching on ifDescr. For example for slot 3:
> 
>  
> 
> snmpwalk -c commstringgoeshere -v2c switch1 ifDescr | grep GigabitEthernet3
> 
>  
> 
> This isn't the most efficient method, you'd usually want to do that once, store the ifIndex to ifDescr map somewhere, and just query ifIndex directly depending on what you're trying to achieve.
> 
>  
> 
> Rgds,
> 
>  
> 
>  
> 
>  
> 
> - I.
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20120711/e9e41300/attachment.html>