By default, all router interfaces have SNMP access privileges. To limit the access through certain interfaces only, include the interface statement at the [edit snmp] hierarchy level:
- [edit snmp]
-
interface [ interface-names ];
Specify the names of any logical or physical interfaces that should have SNMP access privileges. Any SNMP requests entering the router from interfaces not listed are discarded.
Example: Configuring Secured Access List Checking
Grant SNMP access privileges only to devices on interfaces so-0/0/0 and at-1/0/1. The following example does this by configuring a list of logical interfaces:
- [edit]
- snmp {
- interface [ so-0/0/0.0 so-0/0/0.1 at-1/0/1.0 at-1/0/1.1
];
- }
The following example grants the same access by configuring a list of physical interfaces:
- [edit]
- snmp {
- interface [ so-0/0/0 at-1/0/1 ];
- }