SNMP Access | docsis.org

You are here

SNMP Access

10 posts / 0 new
Last post
jobin007007
SNMP Access

I have SNMP access to cablems on my lab CMTS. I am not sure if this access is restricted.
How do I make sure that any device on my lab CMTS has unrestricted access to every Cable modem. No restrictions.

Capm
acl

Are you talking about being able to bring up the modems internal page or do an snmp walk from a modem to modem? You should simply need to set up your access list in your router to allow the IP network you designate to talk to the cm IP network. There could also be an access list in your CMTS as well.

jobin007007
I am talking about doing an

I am talking about doing an snmp walks. However I read that some MIB's are protected with passwords. I want to remove the protection and be able to access any MIB, OID I want. I want this to be setup up on my lab CMTS

Capm
Have you ran into any that

Have you ran into any that require anything more than your community strings? (have you set those in your cm config?)

jobin007007
The CMTS guy told me the

The CMTS guy told me the community string is set to public.
However I downloaded about 30 Arris MIB's from different websites. They did not work.
The basic IF MIBs work on all modems.
How would I know if the anything requires more than community string? If i try to run a mib/look at OID value without right password, would it give me the same error message as if the OID did not exist or would it give me a access denied error. I am working with Ireasoning MIB browser.

Capm
Support

Get a support account with Arris, you'll get access to their sso site where you can get the latest firmwares along with all the mibs, provisioning manuals and PacketAce. Its not very expensive, and its invaluable. Their support people are really good too.

jobin007007
arris support

Do you know how I can create a support account with arris? Like a link or phone number to call.

fb445421
SNMP access

Hi!

If you want open access to SNMP you can do this in the modem config file:

SnmpMibObject docsDevNmAccessIp.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessIpMask.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessCommunity.1 String "public" ;
SnmpMibObject docsDevNmAccessControl.1 Integer 2; /* read */
SnmpMibObject docsDevNmAccessStatus.1 Integer 4; /* createAndGo */
SnmpMibObject docsDevNmAccessIp.2 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessIpMask.2 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessCommunity.2 String "private" ;
SnmpMibObject docsDevNmAccessControl.2 Integer 3; /* readWrite */
SnmpMibObject docsDevNmAccessStatus.2 Integer 4; /* createAndGo */
SnmpMibObject docsDevNmAccessIp.3 IPAddress 10.20.30.1;
SnmpMibObject docsDevNmAccessIpMask.3 IPAddress 255.255.255.255 ;
SnmpMibObject docsDevNmAccessCommunity.3 String "some_other_community" ;
SnmpMibObject docsDevNmAccessControl.3 Integer 3; /* readWrite */
SnmpMibObject docsDevNmAccessStatus.3 Integer 4; /* createAndGo */

I think there can be 3 instances as described above, maybe four. As you can see in the third instance, it is easy to add restrictions so not everyone can read and write variables from the modems.

Then do this:

snmpwalk -v 2c -c public -m all 10.20.31.11 <----- modem IP
snmpwalk -v 2c -c public -m all 10.20.31.11 enterprises <----- "enterprises" gives you the proprietary mibs

/Fredrik

jobin007007
thanks

Thank you will try it.

serykh
I'll bring up this old topic.

Access via SNMP is restricted for Arris modems by comparison with other manufacturers.
All SNMP access settings in the modem configuration file are made and are the same for everyone. Works without problems except for Arris modems.
Why can't I get SNMP access from Arris to some of the mib? These are not specific MIBS for Arris.

Log in or register to post comments