cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2774
Views
0
Helpful
4
Replies

NX-OS SNMP Groups

daviddo99
Level 1
Level 1

I am trying to configure a snmp group that would allow snmpset command against the ifAdminStatus OID. If i configure a user on snmp group/role network-admin i can use the snmpset to up/down a interface. How would i create a custom role that only allow snmpset aganist ifAdminStatus OID?

1 Accepted Solution

Accepted Solutions

You can automate that with EEM script.

View solution in original post

4 Replies 4

On good ole Cisco routers you can do the "snmp-server view" command and restrict all kinds of OID's. This aint gonna happen on the NX-OS.

So tell us the "why", you want to do the snmpset for ifAdminStatus. I am trying to think of other solutions if that may help

i wanted a way for the user to down/up a interface using a script they can run.

You can automate that with EEM script.

Hi,

As we all know the SNMP view is not available in NX-OS, however if you want to create a group to specify a single OID you can configure a RBAC, see documentation below : 

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli_rel_4_0_1a/CLIConfigurationGuide/sec_rbac.html#71793

Example: 

role name Allow_OID

rule 1 permit read feature snmp
rule 2 permit write feature snmp
rule 3 deny read oid 1.3.6.1.2.1.2.2.1.7 (ifAdminStatus )

Then just assign an user to the new group created. 

Hope it helps.

Claudio G

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: