topic Does XMC need SNMP write access to switches? in ExtremeCloud IQ- Site Engine Management Center

Does XMC need SNMP write access to switches?

paulc — Fri, 06 Aug 2021 01:53:21 GMT

For security best practices typically I would only allow SNMP with RO (read only) access on network devices. Does XMC need write access to be allowed on Extreme switches for any functionality? These are all VOSS and EXOS switches. Thanks.

Re: Does XMC need SNMP write access to switches?

Miguel-Angel_RO — Fri, 06 Aug 2021 01:58:03 GMT

Paulc,

The CoA (reauthentication 802.1X or MAC auth) is very often performed via SNMP.

If you want to secure that define an access policy that will allow SNMP to authorized devices only.

Mig

Re: Does XMC need SNMP write access to switches?

StephanH — Fri, 06 Aug 2021 11:59:39 GMT

Hello Paulc,

in addition to Mig's answer. If you used XMC only for monitoring and you don't use ExtremeControl, then it is sufficient to have read-only access via SNMP.

However, XMC also offers the possibility to change configuration on the switch. For example you can change the name of a switch. Here write access is necessary.

Basically it is recommended (XMC best practise) to allow write access via SNMP, but this should be done via SNMPv3.

Re: Does XMC need SNMP write access to switches?

paulc — Fri, 06 Aug 2021 20:26:50 GMT

Great, thank you both!