Cisco cBR 8 - Configuration Examples for SNMP Support over VPNs-Context-Based Access Control

PurposeCommand or Action
(Optional) Disables all SNMP authentication
notifications (traps and informs) generated for
packets received on VRF interfaces.
no snmp-server trap authentication vrf
Example:
Device(config)# no snmp-server trap authentication vrf
Step 11
•
Use this command to disable authentication
traps only for those packets on VRF interfaces
with incorrect community associations.
Configuration Examples for SNMP Support over
VPNs—Context-Based Access Control
Example: Configuring Context-Based Access Control
The following configuration example shows how to configure the SNMP Support over VPNs—Context-Based
Access Control feature for SNMPv1 or SNMPv2:
Depending on your releases, the context command is replaced by the snmp context command. See the
Cisco IOS Network Management Command Reference for more information.
Note
snmp-server context A
snmp-server context B
ip vrf Customer_A
rd 100:110
context A
route-target export 100:1000
route-target import 100:1000
!
ip vrf Customer_B
rd 100:120
context B
route-target export 100:2000
route-target import 100:2000
!
interface TenGigabitEthernet4/1/0
description Belongs to VPN A
ip vrf forwarding CustomerA
ip address 192.168.2.1 255.255.255.0
interface TenGigabitEthernet4/1/1
description Belongs to VPN B
ip vrf forwarding CustomerB
ip address 192.168.2.2 255.255.255.0
snmp-server user commA grp1A v1
snmp-server user commA grp2A v2c
snmp-server user commB grp1B v1
snmp-server user commB grp2B v2c
snmp-server group grp1A v1 context A read viewA write viewA notify viewA
snmp-server group grp1B v1 context B read viewB write viewB notify viewB
Cisco cBR Series Converged Broadband Routers Troubleshooting and Network Management Configuration
Guide for Cisco IOS XE Fuji 16.8.x
76
SNMP Support over VPNs—Context-Based Access Control
Configuration Examples for SNMP Support over VPNs—Context-Based Access Control