[c-nsp] How to disable ILMI/SNMP CSCvs33325

2022-09-19 Thread Hank Nussbacher via cisco-nsp
Recently Shodan has been showing how it probes all our IOS-XE routers via SNMP even though we have an ACL on all our SNMP.  We then found that there is a bugid on the issue (ILMI can't be blocked by ACL): CSCvs33325 As well as an internal TAC bugid: CSCdp11863 Basically, none of the commands of

Re: [c-nsp] How to disable ILMI/SNMP CSCvs33325

2022-09-19 Thread Gert Doering via cisco-nsp
HI, On Mon, Sep 19, 2022 at 02:29:06PM +0300, Hank Nussbacher via cisco-nsp wrote: > Recently Shodan has been showing how it probes all our IOS-XE routers > via SNMP even though we have an ACL on all our SNMP.  We then found that > there is a bugid on the issue (ILMI can't be blocked by ACL): >

Re: [c-nsp] How to disable ILMI/SNMP CSCvs33325

2022-09-19 Thread Hank Nussbacher via cisco-nsp
On 19/09/2022 15:40, Gert Doering wrote: HI, On Mon, Sep 19, 2022 at 02:29:06PM +0300, Hank Nussbacher via cisco-nsp wrote: Recently Shodan has been showing how it probes all our IOS-XE routers via SNMP even though we have an ACL on all our SNMP.  We then found that there is a bugid on the issu

Re: [c-nsp] How to disable ILMI/SNMP CSCvs33325

2022-09-19 Thread Gert Doering via cisco-nsp
Hi, On Mon, Sep 19, 2022 at 03:47:09PM +0300, Hank Nussbacher via cisco-nsp wrote: > On 19/09/2022 15:40, Gert Doering wrote: > > On Mon, Sep 19, 2022 at 02:29:06PM +0300, Hank Nussbacher via cisco-nsp > > wrote: > >> Recently Shodan has been showing how it probes all our IOS-XE routers > >> via