Guest

Preview Tool

Cisco Bug: CSCvv04576 - Limit SNMP listener to 1 particular IP interface only

Last Modified

Jul 20, 2020

Products (1)

  • Cisco Nexus 5000 Series Switches

Known Affected Releases

7.3(6)N1(1)

Description (partial)

Symptom:
As of now the only way to limit SNMP listener to 1 IP is to use extended ACL together with snmp-server user or community configuration. This approach doesn't scale well. It would be good to set up one particular interface that would respond to SNMP queries together with ACL that would define management host IPs.
For sending traps there is source-interface parameter that defines the IP interface that will be used as a source but it doesn't affect the listener. Without extended ACL the device will reply on every IP interface that it has.

Conditions:
- Define snmp-server user/community
- The device will reply to SNMP queries on all IP addresses that it has
- The issue applies to all Nexus devices
- This logic is followed on all software releases
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.