topic Re: SNMPv3 configuration in Spark Firewall (SMB)

SNMPv3 configuration

Matlu — Fri, 01 Dec 2023 19:45:16 GMT

Hello, everybody.

I am currently configuring SNMPv3 enablement on several SMB model 1550.

My question is, in the SNMPv3 configuration I do not see anywhere, the option to set the mode (write/read mode), for the community.

Is it possible to configure this on these appliances?

By default, by simply enabling SNMPv3, what mode does it work in?
Write or Read?

Greetings.

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 20:04:11 GMT

Re: SNMPv3 configuration

Matlu — Fri, 01 Dec 2023 20:06:15 GMT

Hey,

That's the option I'm looking at right now.

But, the working mode is "read/write", is that something I can get to visualize in the WebUI?

Can it be assumed, that it is working in read mode?

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 20:17:29 GMT

I cant seem to figure that out from clish commands or web UI...but will keep checking.

Andy

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 20:22:13 GMT

Maybe not possible on smb appliance? Not sure...I tried, but does not give an option

On regular Gaia, you can do below:

set snmp community <String> {read-only | read-write}

SMB:

Re: SNMPv3 configuration

Matlu — Fri, 01 Dec 2023 20:24:21 GMT

This is precisely my doubt.

I am investigating.

I will raise my hand with the TAC, to see if it helps me,

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 20:26:25 GMT

All you see is this...

Re: SNMPv3 configuration

Matlu — Fri, 01 Dec 2023 21:28:21 GMT

Hey,

The TAC, provided me this command to know, if at a global level, the SNMP works in "Read/Write" mode on a SMB Firewall.

show service-system-default SNMP firewall-settings

Example:
FW01> show service-system-default SNMP firewall-settings
read-only: true

So far, I see that at least, it helps to know if we are in "Read" mode of a config.

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 22:26:31 GMT

Good command!

Re: SNMPv3 configuration

Matlu — Fri, 01 Dec 2023 23:04:05 GMT

The detail is that I am still not sure if there is a way to define for a particular community whether it can work in read or write mode.

The command you shared with me seems to be a command that "impacts" the "general" SMB configuration.

I'm trying to validate that.

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 23:07:53 GMT

Not sure bro, I dont work with any customer that uses these devices. If someone has a question, I just spin up demo point lab on support site.

Andy

Re: SNMPv3 configuration

Matlu — Fri, 01 Dec 2023 23:11:22 GMT

I don't know about this site.
Does Check Point have a website where I can access free labs for this kind of solutions, such as SMBs?
Can you share the link or guide me to where I can access these demo labs, please?

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 23:16:38 GMT

Creds are in the guide, but its admin / Cpwins1! and labs are good for 4 hours and its ready in literally 2 minutes.

Andy

Re: SNMPv3 configuration

Matlu — Fri, 01 Dec 2023 23:21:12 GMT

Great,
I'll give it a try. 🙂
Thanks, Buddy.

Re: SNMPv3 configuration

the_rock — Fri, 01 Dec 2023 23:22:57 GMT

you are welcome

Re: SNMPv3 configuration

Chris_Atkinson — Sat, 02 Dec 2023 14:02:42 GMT

SNMP community is a v2 option.

Please refer: https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Search.htm?q=snmp&p=2