User guide

Configuring source address checking SNMP
1-101
iMG/RG Software Reference Manual (System Configuration)
So the snmpNotifyFilterMask entry would be
ff:bf
With this value for snmpNotifyFilterMask and all other appropriate entries in the con figuration file, a
notification containing values from any of the following ifTable objects would match the filter and would not
be sent:
ifIndex.2
ifDescr.2
ifType.2
ifMtu.2
ifSpeed.2
ifPhysAddress.2
ifAdminStatus.2
ifOperStatus.2
ifLastChange.2
ifInUcastPkts.2
ifInErrors.2
ifOutUcastPkts.2
ifOutErrors.2
ifOutQLen.2
ifSpecific.2
1.6.4.2 Associating a filter with a notification parameter
To create a notification filter, add one or more snmpNotifyFilterProfileEntry definition in the
snmpd.cnf file accordingly the following syntax:
snmpNotifyFilterProfileEntry <snmpTargetParamsName> <snmpNotifyFil-
terProfileName> <snmpNotifyFilterProfileStorageType>
snmpTargetParamsName
is a snmpTargetParamsName defined in the snmpTargetParamsTable
snmpNotifyFilterProfileName
is a snmpNotifyFilterProfileName defined in the snmpNotifyFilterTable
snmpNotifyFilterProfileStorageType
is nonVolatile, permanent, or readOnly.
1.6.5 Configuring source address checking
A feature of SNMP Research software allows the SNMP engine to perform additional authentication of an
incoming SNMPv1, SNMPv2c, or SNMPv3 message by checking the source address of the message.