topic Block SNMP traffic to devices in ExtremeSwitching (EXOS/Switch Engine)

Block SNMP traffic to devices

David_Cotos — Sat, 23 Mar 2019 01:24:06 GMT

Hello all, I'm a bit of a exos newb and need assistance. Is there a way to create an ACL to specifically block SNMP traffic to a device connected to a port?

I was thinking of using the GUI route and set up a dynamic ACL. Would this be a good idea or not recommended?

Any thoughts?

David

Re: Block SNMP traffic to devices

Kawawa — Mon, 25 Mar 2019 23:34:41 GMT

Hi David,

Here's a guide on how to create Dynamic ACLs using Chalet (EXOS GUI): https://documentation.extremenetworks.com/chalet/Chalet/t_configuring-acls.shtml

Here's an example of your rule:

NOTE: If you do not specific protocol udp and simply add the destination-port,t he ACL will throw an error as this port could equally belong to a TCP socket.

Note: What you're trying to do involves installing an egress ACL. if you have other rules currently utilizing the egress ACL slices, you might run into a situation where you see the following, which simply means there's no available resources to install the new rule. Generally, there's more ingress ACL slices available should you wish to use that instead:

You can edit the ACL and enter new conditions as and when you please.

I hope this answers your question.

Re: Block SNMP traffic to devices

David_Cotos — Tue, 26 Mar 2019 19:22:43 GMT

This is great, thank you for the information!