SNMP on a switch

I was looking at a switch configuration for SNMP. SNMP works fine but here is the config

ip access-list standard SNMP
 permit 172.18.193.30
 permit 172.20.9.50
 permit 172.20.2.36
 permit 172.24.1.30
 permit 172.21.1.95
 permit 172.20.1.87
 permit 172.20.1.86
 deny   any log
ip access-list standard SNMPIPSLA
 permit 172.20.1.87
!
snmp-server community VvVaSDD5fZQqD6MR8CZPBY8wjMSJ3UN RO SNMP
snmp-server community jpbImgnDwKVSgOycWv1k RW SNMPIPSLA

This standard access list is NOT applied to any interface. Shouldnt it be applied somewhere ?maybe on vlan 1 interface ?
I asked our cisco engineer and he said it is not applied anywhere. Same thing happens on the router as well. Any input would be appreciated.
Router is cisco 2811
switch is cisco 3750
c_hocklandAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

amitnepalCommented:
This is just an acl , this is just there until you apply it to any interface.
In order to apply it to an interface do the following :

Router>enable
Router#configure terminal
router(config)#interface number  ( eg. interface fa0/1 , or interface vlan1)
router(config-if)#ip access-group {access-list-number | access-list-name} {in | out}

You can view if it is applied to a particular interface by issuing :

show ip access-list interface name

Thanks
0
Paul CoffeyCommented:
It doesn't have to be applied to an access list.  SNMP is global.  The ACL limits who can access SNMP data via the named acl which is then applied to the snmp server string.

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t2/feature/guide/gtsnmpal.html



0
hvillanuCommented:
Hi,

SNMP is configured on Global Config.


To give access to certain Ip's at snmp information use:
snmp-server community MyComunity RO
snmp-server host <ip_monitor_server> MyComunity

Also can combine with other options like:
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps config
snmp-server enable traps snmp authentication

If put "?" at the end of a command you'll see a brief explanation... something like:

Switch-Router(config)#snmp-server host ?
  WORD                                                  IP/IPV6 address of SNMP
                                                        notification host
  http://<Hostname or A.B.C.D>[:<port number>][/<uri>]  HTTP address of XML
                                                        notification host
--- hope helps ---
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

rochey2009Commented:
It's being applied to your SNMP community strings

snmp-server community VvVaSDD5fZQqD6MR8CZPBY8wjMSJ3UN RO SNMP
snmp-server community jpbImgnDwKVSgOycWv1k RW SNMPIPSLA

each of the following:
 172.18.193.30
 172.20.9.50
 172.20.2.36
 172.24.1.30
 172.21.1.95
 172.20.1.87
 172.20.1.86

has access read only SNMP access to your device.

and 172.20.1.87 has read write SNMP access to your device.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tommca4781Commented:
rochey2009 is correct; The access-lists for SNMP is appended to the community string.

Please reference this specific section of the URL paulc posted for correct syntax:
http://www.cisco.com/en/US/docs/ios/12_3t/12_3t2/feature/guide/gtsnmpal.html#wp1044236

0
c_hocklandAuthor Commented:
for some reason the solarwinds cannot communicate via snmp with my new devices. I copied /pasted the exact code from another cisco device. What did i miss ?
0
rochey2009Commented:
can you ping the cisco device from solarwinds. which address is the solarwinds device?
0
c_hocklandAuthor Commented:
yes ping responds. SNMP ping fails.
0
rochey2009Commented:
what is the IP address of the solarwinds device and which solarwinds tool are you using?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.