I have SNMP access to cablems on my lab CMTS. I am not sure if this access is restricted.
How do I make sure that any device on my lab CMTS has unrestricted access to every Cable modem. No restrictions.
Are you talking about being able to bring up the modems internal page or do an snmp walk from a modem to modem? You should simply need to set up your access list in your router to allow the IP network you designate to talk to the cm IP network. There could also be an access list in your CMTS as well.
I am talking about doing an snmp walks. However I read that some MIB's are protected with passwords. I want to remove the protection and be able to access any MIB, OID I want. I want this to be setup up on my lab CMTS
The CMTS guy told me the community string is set to public.
However I downloaded about 30 Arris MIB's from different websites. They did not work.
The basic IF MIBs work on all modems.
How would I know if the anything requires more than community string? If i try to run a mib/look at OID value without right password, would it give me the same error message as if the OID did not exist or would it give me a access denied error. I am working with Ireasoning MIB browser.
Get a support account with Arris, you'll get access to their sso site where you can get the latest firmwares along with all the mibs, provisioning manuals and PacketAce. Its not very expensive, and its invaluable. Their support people are really good too.
I think there can be 3 instances as described above, maybe four. As you can see in the third instance, it is easy to add restrictions so not everyone can read and write variables from the modems.
Then do this:
snmpwalk -v 2c -c public -m all 10.20.31.11 <----- modem IP
snmpwalk -v 2c -c public -m all 10.20.31.11 enterprises <----- "enterprises" gives you the proprietary mibs
Access via SNMP is restricted for Arris modems by comparison with other manufacturers.
All SNMP access settings in the modem configuration file are made and are the same for everyone. Works without problems except for Arris modems.
Why can't I get SNMP access from Arris to some of the mib? These are not specific MIBS for Arris.
Are you talking about being able to bring up the modems internal page or do an snmp walk from a modem to modem? You should simply need to set up your access list in your router to allow the IP network you designate to talk to the cm IP network. There could also be an access list in your CMTS as well.
I am talking about doing an snmp walks. However I read that some MIB's are protected with passwords. I want to remove the protection and be able to access any MIB, OID I want. I want this to be setup up on my lab CMTS
Have you ran into any that require anything more than your community strings? (have you set those in your cm config?)
The CMTS guy told me the community string is set to public.
However I downloaded about 30 Arris MIB's from different websites. They did not work.
The basic IF MIBs work on all modems.
How would I know if the anything requires more than community string? If i try to run a mib/look at OID value without right password, would it give me the same error message as if the OID did not exist or would it give me a access denied error. I am working with Ireasoning MIB browser.
Get a support account with Arris, you'll get access to their sso site where you can get the latest firmwares along with all the mibs, provisioning manuals and PacketAce. Its not very expensive, and its invaluable. Their support people are really good too.
Do you know how I can create a support account with arris? Like a link or phone number to call.
Hi!
If you want open access to SNMP you can do this in the modem config file:
SnmpMibObject docsDevNmAccessIp.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessIpMask.1 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessCommunity.1 String "public" ;
SnmpMibObject docsDevNmAccessControl.1 Integer 2; /* read */
SnmpMibObject docsDevNmAccessStatus.1 Integer 4; /* createAndGo */
SnmpMibObject docsDevNmAccessIp.2 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessIpMask.2 IPAddress 0.0.0.0 ;
SnmpMibObject docsDevNmAccessCommunity.2 String "private" ;
SnmpMibObject docsDevNmAccessControl.2 Integer 3; /* readWrite */
SnmpMibObject docsDevNmAccessStatus.2 Integer 4; /* createAndGo */
SnmpMibObject docsDevNmAccessIp.3 IPAddress 10.20.30.1;
SnmpMibObject docsDevNmAccessIpMask.3 IPAddress 255.255.255.255 ;
SnmpMibObject docsDevNmAccessCommunity.3 String "some_other_community" ;
SnmpMibObject docsDevNmAccessControl.3 Integer 3; /* readWrite */
SnmpMibObject docsDevNmAccessStatus.3 Integer 4; /* createAndGo */
I think there can be 3 instances as described above, maybe four. As you can see in the third instance, it is easy to add restrictions so not everyone can read and write variables from the modems.
Then do this:
snmpwalk -v 2c -c public -m all 10.20.31.11 <----- modem IP
snmpwalk -v 2c -c public -m all 10.20.31.11 enterprises <----- "enterprises" gives you the proprietary mibs
/Fredrik
Thank you will try it.
Access via SNMP is restricted for Arris modems by comparison with other manufacturers.
All SNMP access settings in the modem configuration file are made and are the same for everyone. Works without problems except for Arris modems.
Why can't I get SNMP access from Arris to some of the mib? These are not specific MIBS for Arris.