Block SNMP traffic to devices

[David_Cotos]

Hello all, I'm a bit of a exos newb and need assistance. Is there a way to create an ACL to specifically block SNMP traffic to a device connected to a port?

I was thinking of using the GUI route and set up a dynamic ACL. Would this be a good idea or not recommended?

Any thoughts?

David

[David_Cotos]

This is great, thank you for the information!

[Kawawa · Accepted solution]

Hi David,

Here's a guide on how to create Dynamic ACLs using Chalet (EXOS GUI): https://documentation.extremenetworks.com/chalet/Chalet/t_configuring-acls.shtml

Here's an example of your rule:

NOTE: If you do not specific protocol udp and simply add the destination-port,t he ACL will throw an error as this port could equally belong to a TCP socket.

Note: What you're trying to do involves installing an egress ACL. if you have other rules currently utilizing the egress ACL slices, you might run into a situation where you see the following, which simply means there's no available resources to install the new rule. Generally, there's more ingress ACL slices available should you wish to use that instead:

You can edit the ACL and enter new conditions as and when you please.

I hope this answers your question.