Filtering Snmp Requests; Authenticating Snmpv3 Users Based On Location - Cisco Nexus 7000 Series Configuration Manual

Configuring SNMP

Filtering SNMP Requests

You can assign an access control list (ACL) to an SNMPv3 user or SNMPv3 community to filter incoming
SNMP requests. If the assigned ACL allows the incoming request packet, SNMP processes the request. If the
ACL denies the request, SNMP drops the request and sends a system message.
Create the ACL with the following parameters:
• Source IP address
• Destination IP address
• Source port
• Destination port
• Protocol (UDP or TCP)
Procedure
Step 1
Step 2
Step 3
Step 4

Authenticating SNMPv3 Users Based on Location

You can authenticate local or remote SNMPv3 users based on their location.
Command or Action
configure terminal
Example:
switch# configure terminal
switch(config)#
snmp-server user name [use-ipv4acl ipv4acl-name]
[use-ipv6acl ipv6acl-name]
Example:
switch(config)# snmp-server community public
use-ipv4acl myacl
snmp-server community name [use-ipv4acl
ipv4acl-name] [use-ipv6acl ipv6acl-name]
Example:
switch(config)# snmp-server community public
use-ipv4acl myacl
copy running-config startup-config
Example:
switch(config)# copy running-config
startup-config
Cisco Nexus 7000 Series NX-OS System Management Configuration Guide
Filtering SNMP Requests
Purpose
Enters global configuration mode.
Assigns an IPv4 or IPv6 ACL to an
SNMPv3 user to filter SNMP requests.
The AAA server must support the
Note
creation of SNMPv3 users.
Assigns an IPv4 or IPv6 ACL to an
SNMPv3 community to filter SNMP
requests.
(Optional)
Copies the running configuration to the
startup configuration.
185