Can I add acl (block mac address or allow mac address) on snmp

  • 0
  • 1
  • Question
  • Updated 2 months ago
  • Answered
I want to block mac address or I want to allow blocked mac address on SNMP agent

Can I do this via snmp ? 
Photo of Sezgin

Sezgin

  • 70 Points

Posted 2 months ago

  • 0
  • 1
Photo of Tomasz

Tomasz

  • 2,430 Points 2k badge 2x thumb
Hi,

Do you want to use SNMP to deploy ACLs or do you want to deploy ACL to block SNMP?
SNMP uses UDP port 161 so this might be used, but it depends on your hardware if you can create ACL that combines L2 and L4 matching rules. I doubt it would work, gotta think on a workaround.

Regards,
Tomasz
(Edited)
Photo of Sushruth Sathyamurthy

Sushruth Sathyamurthy, Employee

  • 1,008 Points 1k badge 2x thumb
HI Sezgin,

I assume you have an EXOS switch with you. As Tomasz said, if you wish to block/allow certain users from accessing the switch via SNMP, then 
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-restrict-SNMP-access

If you wish to deploy ACLs using SNMP, you can explore using dynamic ACLs as they are a part of the configuration file as opposed to a static ACL and can be pushed to a switch. But I have not tested this as yet and as Tomazs said, we may need to check if we can use L2 and L4 information together. More details will be present in the EXOS user guide for using dynamic ACLs.