diff options
| author | Christian Poessinger <christian@poessinger.com> | 2019-01-30 06:09:04 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2019-01-30 19:27:57 +0100 |
| commit | aaf2a728a759c0e22d0ccafc3b2addbc5cfd956e (patch) | |
| tree | 2620962d768037aa1580bcfc504eaa287bee6063 /op-mode-definitions/show-arp.xml | |
| parent | 97186852f529935309c009e38403cead2bf0ce75 (diff) | |
| download | vyos-1x-aaf2a728a759c0e22d0ccafc3b2addbc5cfd956e.tar.gz vyos-1x-aaf2a728a759c0e22d0ccafc3b2addbc5cfd956e.zip | |
T1160: fix (ro|rw)community ACL
WHen building up the SNMP v2 community ro/rw access all hosts from
a INET version could access even when the community was locked to one
INET family.
Example #1:
set service snmp community bar network 172.16.0.0/12
Allowed access only to IPv4 network 172.16.0.0/12 but it allowed acces from
IPv6 ::/0.
Example #2:
set service snmp community baz network 2001:db8::/64
Limited IPv6 access to 2001:db8::/64 but IPv4 was open to 0.0.0.0/0
(cherry picked from commit cc07c4727bdffb4c220ce28ab9f697b01fe4afb7)
Diffstat (limited to 'op-mode-definitions/show-arp.xml')
0 files changed, 0 insertions, 0 deletions