topic RE: Can I add acl (block mac address or allow mac address) on snmp in ExtremeSwitching (EXOS/Switch Engine)

Can I add acl (block mac address or allow mac address) on snmp

Sezgin — Thu, 13 Sep 2018 19:55:00 GMT

I want to block mac address or I want to allow blocked mac address on SNMP agent

Can I do this via snmp ?

RE: Can I add acl (block mac address or allow mac address) on snmp

Tomasz — Fri, 14 Sep 2018 02:39:00 GMT

Hi,

Do you want to use SNMP to deploy ACLs or do you want to deploy ACL to block SNMP?
SNMP uses UDP port 161 so this might be used, but it depends on your hardware if you can create ACL that combines L2 and L4 matching rules. I doubt it would work, gotta think on a workaround.

Regards,
Tomasz

RE: Can I add acl (block mac address or allow mac address) on snmp

Sushruth_Sathya — Sun, 16 Sep 2018 16:56:00 GMT

HI Sezgin,

I assume you have an EXOS switch with you. As Tomasz said, if you wish to block/allow certain users from accessing the switch via SNMP, then
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-restrict-SNMP-access

If you wish to deploy ACLs using SNMP, you can explore using dynamic ACLs as they are a part of the configuration file as opposed to a static ACL and can be pushed to a switch. But I have not tested this as yet and as Tomazs said, we may need to check if we can use L2 and L4 information together. More details will be present in the EXOS user guide for using dynamic ACLs.