Use SNMP to get Access-list

[networking]

Hi all,

I would like to use SNMP to get the contents of a specific Access-List.

The Access-List changes daily and I'd like to create a Web Page that allows users to see if a specific entry exists, without giving them login access to the router, or having them log into CW.

If Anyone Knows the OID's necessary to get the access-lists out, I would be very grateful if you would tell me, as I've been searching for this for a donkeys year.

Many Thanks

Nick

[David Stanford]

There's no OID specifically that can pull access-list info or changes.

About the best you could do would be to use the CISCO-CONFIG-COPY-MIB to pull the config of the device and then use a script to search for patterns from there.

[networking]

Hi Davistan,

Thanks for Responding so Quickly!

Copying out the config was may backup plan as I didn't really fancy giving the Web App a RW community string.

Unless anyone can think of an alternative, I think I may resort to having a demon SSH onto the box and yank out a 'show ip access-list USER_LIST' then push it to the Web App.

Thanks again for the response.