Multiple SNMP Communities with same name not permitted

RouterOS General
1

It appears that RouterOS uses the SNMP community name as a unique value and will not allow multiple. I require multiple values to allow multiple subnets to poll the device via SNMP. The only workaround I’m aware of is allowing a larger subnet such as 0.0.0.0/0 (which is the default) but I’m not happy with this. Any other workaround available for this?

On Cisco you would create an ACL with multiple values like:

access-list 5 permit 10.174.8.18
access-list 5 permit 10.174.1.0 0.0.0.31
access-list 5 permit 10.174.14.16 0.0.0.15
snmp-server community public RO 5
2

You can make an filter rule that will only accept port 161 from known IP addresses and set up the subnets you need in an address list. Then you can have your SNMP community string set up to 0.0.0.0/0. You can do this for any services you have and don’t want to be accessible to anyone.

3

That should work. I guess I already do have such a filter setup to only permit IP traffic destined to the Mikrotik from approved IPs so this may work already.