SNMPv3 configuration

[Matlu]

Hello, everybody.

I am currently configuring SNMPv3 enablement on several SMB model 1550.

My question is, in the SNMPv3 configuration I do not see anywhere, the option to set the mode (write/read mode), for the community.

Is it possible to configure this on these appliances?

By default, by simply enabling SNMPv3, what mode does it work in?
Write or Read?

Greetings.

[the_rock]

 

[Matlu]

Hey,

That's the option I'm looking at right now.

But, the working mode is "read/write", is that something I can get to visualize in the WebUI?

Can it be assumed, that it is working in read mode?

[the_rock]

I cant seem to figure that out from clish commands or web UI...but will keep checking.

Andy

[the_rock]

Maybe not possible on smb appliance? Not sure...I tried, but does not give an option

On regular Gaia, you can do below:

set snmp community <String> {read-only | read-write}

SMB:

 

 

[Matlu]

This is precisely my doubt.

I am investigating.

I will raise my hand with the TAC, to see if it helps me,

[the_rock]

All you see is this...

 

 

[Matlu]

Hey,

The TAC, provided me this command to know, if at a global level, the SNMP works in "Read/Write" mode on a SMB Firewall.

show service-system-default SNMP firewall-settings

Example:
FW01> show service-system-default SNMP firewall-settings
read-only: true

So far, I see that at least, it helps to know if we are in "Read" mode of a config.

[the_rock]

Good command!

[Matlu]

The detail is that I am still not sure if there is a way to define for a particular community whether it can work in read or write mode.

The command you shared with me seems to be a command that "impacts" the "general" SMB configuration.

I'm trying to validate that.

[the_rock]

Not sure bro, I dont work with any customer that uses these devices. If someone has a question, I just spin up demo point lab on support site.

Andy

[Matlu]

I don't know about this site.
Does Check Point have a website where I can access free labs for this kind of solutions, such as SMBs?
Can you share the link or guide me to where I can access these demo labs, please?

[the_rock]

Creds are in the guide, but its admin / Cpwins1! and labs are good for 4 hours and its ready in literally 2 minutes.

Andy

[Matlu]

Great,
I'll give it a try. 🙂
Thanks, Buddy.

[the_rock]

you are welcome

[Chris_Atkinson]

SNMP community is a v2 option.

Please refer: https://sc1.checkpoint.com/documents/SMB_R81.10.X/CLI/EN/Content/Search.htm?q=snmp&p=2