I want to limit access to the net-snmp agent (snmpd) to only secure (encrypted)
channels. In the simplest case, I can include rouser and rwuser in snmpd.conf and
omit rocommunity and rwcommunity. Is that right?
If i want to get a little more sophisitcated, I can omit v1 and v2c from my group
table like:
# sec.model sec.name
# group MyRWGroup v1 local
# group MyRWGroup v2c local
group MyRWGroup usm local
# group MyROGroup v1 mynetwork
# group MyROGroup v2c mynetwork
group MyROGroup usm mynetwork
Is that right?
What if I want a local user/community to use within a configuration utility but never
want remote, unencrypted access. I'd include the MyRWGroup/v2c line above, right?
Finally, am I correct that in v5.1.x, there's no way to compile v1 or v2c out of the
agent? The best I can do is not configure insecure access?
TIA.
Chris
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Net-snmp-users mailing list
[EMAIL PROTECTED]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
