Restrict SNMP to OIDs

[dj0Nz]

Hi,

I searched the documentation but found nothing: Is there a way to restrict SNMP (v3) access for a certain user to a specific set of or single OIDs? F5 (https://support.f5.com/csp/article/K13625) and other vendors have that feature ("Views").

Thanks in advance!

Cheers,
Michael

[Chris_Atkinson · Accepted solution]

If it's not mentioned in sk90860: How to configure SNMP on Gaia OS it's likely an RFE that will require further discussion with your local SE, that being said I would suggest referencing sk110113 in your request since it hints at what you're after.

[dj0Nz]

This is exactly what I've been looking for. Doesn't survive upgrades, not officially supported but I don't care. 😁
Will check if that works in R81.10. 

Thanks a lot.

[dj0Nz]

Works like a charm:

1. add snmp usm user remote security-level authNoPriv [...]
2. echo "rouser remote auth 1.3.6.1.2.1.4.22.1.2" >> /etc/snmp/userDefinedSettings.conf
3. clish -c "set snmp agent off" && clish -c "set snmp agent on"

Tested with "Get Arp Cache" OID  (https://oidref.com/1.3.6.1.2.1.4.22.1.2), user "remote" can only query this specific OID.

Mission complete. 😁