diff options
| author | Christian Poessinger <christian@poessinger.com> | 2019-01-30 06:09:04 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2019-01-30 06:13:36 +0100 |
| commit | cc07c4727bdffb4c220ce28ab9f697b01fe4afb7 (patch) | |
| tree | 3b00fa5aae4ec805d9b8b3fd667afed3920c0327 /src/op_mode/snmp_v3.py | |
| parent | 6d172d767360a675462da6a0bac100a24c544892 (diff) | |
| download | vyos-1x-cc07c4727bdffb4c220ce28ab9f697b01fe4afb7.tar.gz vyos-1x-cc07c4727bdffb4c220ce28ab9f697b01fe4afb7.zip | |
T1160: fix (ro|rw)community ACL
WHen building up the SNMP v2 community ro/rw access all hosts from
a INET version could access even when the community was locked to one
INET family.
Example #1:
set service snmp community bar network 172.16.0.0/12
Allowed access only to IPv4 network 172.16.0.0/12 but it allowed acces from
IPv6 ::/0.
Example #2:
set service snmp community baz network 2001:db8::/64
Limited IPv6 access to 2001:db8::/64 but IPv4 was open to 0.0.0.0/0
Diffstat (limited to 'src/op_mode/snmp_v3.py')
0 files changed, 0 insertions, 0 deletions