
<html><head></head><body bgcolor="#FFFFFF"><div>I believe the other approach may be using SNMP views to limit access to specific MIB variables.</div><div><br></div><div>A quick Google search shows this which you could possibly apply with a little variation to limiting access to certain interfaces.</div><div><br></div><a href="http://fengnet.com/book/Cisco.IOS.Cookbook.2nd/I_0596527225_CHP_17_SECT_8.html">http://fengnet.com/book/Cisco.IOS.Cookbook.2nd/I_0596527225_CHP_17_SECT_8.html</a><div><br><div><br>On 11/07/2012, at 8:42 AM, Jared Hirst <<a href="mailto:jared.hirst@serversaustralia.com.au">jared.hirst@serversaustralia.com.au</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div><p>Hi Ian,</p>

<p>Nathan clarified more what I was after, but I will try your suggestion and let you know.</p>

<p>Kind Regards,</p>

<p>Jared Hirst<br>

Servers Australia Pty Ltd<br>

Phone: 1300 788 862<br>

<a href="http://www.serversaustralia.com.au">www.serversaustralia.com.au</a></p>

<div class="gmail_quote">On Jul 11, 2012 1:53 AM, "Nathan Brookfield" <<a href="mailto:nathan.brookfield@serversaustralia.com.au">nathan.brookfield@serversaustralia.com.au</a>> wrote:<br type="attribution">

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-AU" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi Ian;<u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Very true comments, I think the issue here is that Jared is trying to limit an SNMP community from only being able to access certain ports or a certain Sup6 card and not having access to pole other parts of the device.<u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">A better rephrase of the question would be ‘How can I limit a community or an SNMP peer to a certain Sup6’ if at all possible?<u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Many Thanks;<u></u><u></u></span></p>

<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Nathan<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>

<div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm"><p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a> [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf Of </b>Ian Henderson<br>

<b>Sent:</b> Tuesday, 10 July 2012 10:54 PM<br><b>To:</b> Jared Hirst<br><b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] Cisco SNMP on a certain line card<u></u><u></u></span></p>

</div></div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p><div><div><p class="MsoNormal" style="margin-left:36.0pt">On 10/07/2012, at 10:43 PM, Jared Hirst wrote:<u></u><u></u></p></div><p class="MsoNormal" style="margin-left:36.0pt">

<br><br><u></u><u></u></p><p class="MsoNormal" style="margin-left:36.0pt"><span><span style="font-size:11.5pt;font-family:"Calibri","sans-serif"">I have a supervisor 6 card and I am wondering how I can do SNMP on a certain line card, we have 5 Gbe switches in the one chassis and I want to be able to just export SNMP for one of the switches in the ‘stack’ does anyone know of any way to do this?</span></span><u></u><u></u></p>

<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">You mentioned a Sup6 which implies a 4500. These don't work like a stack of 3750s or similar - its just one big switch. SNMP against the IP address of the supervisor, then use code/text utils/whatever to grab the card you're after matching on ifDescr. For example for slot 3:<u></u><u></u></p>

</div><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">snmpwalk -c commstringgoeshere -v2c switch1 ifDescr | grep GigabitEthernet3<u></u><u></u></p>

</div><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">This isn't the most efficient method, you'd usually want to do that once, store the ifIndex to ifDescr map somewhere, and just query ifIndex directly depending on what you're trying to achieve.<u></u><u></u></p>

</div><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">Rgds,<u></u><u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>

</div><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p></div><div><p class="MsoNormal" style="margin-left:36.0pt">- I.<u></u><u></u></p>

</div></div></div></blockquote></div>

</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>AusNOG mailing list</span><br><span><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a></span><br><span><a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a></span><br></div></blockquote></div></body></html>