SNMPv3 Support

Hello all,

I am running SWOS 2.16 on my CSS106-5G-1S. I would like to see support for SNMPv3 added, as well as CPU stats via SNMP. I have Zabbix monitoring these devices and I get no CPU stats.

Thanks,
Steve

Devices running SwOS only use “CPU” for managing ASIC … so CPU stats are in this sense irrelevant for device performance.

What info can be pulled on CSS-devices with SwOS?

From the documentation:
SwOS supports SNMP v1 and v2c (the Response for GetRequest, GetNextRequest and GetBulkRequest) and uses IF-MIB, SNMPv2-MIB, BRIDGE-MIB and MIKROTIK-MIB (only for health, PoE-out and SFP diagnostics). SNMP traps and writing SwOS configuration are not supported.

Available SNMP data:
System information
System uptime
Port status
Interface statistics
Host table information

Okey, thank you!
How secure/insecure is it to use this?
Are there any ways you can secure SNMP when using SwOS?

For CRS switches and such i know you can add specific users and restrict rights etc for a specific snmp user, only for specific MAC addresses, ipnumbers/subnets.. etc.
I know SNMP can be a security issue.

Please inform me a little more.

SNMP v1 & v2c are not particularly secure, however as SwOS doesn’t support writes the worst case is information disclosure. There are other issues with SwOS - the UI uses basic digest authentication, content is not encrypted, the password is stored as hex ASCII in the configuration file.

Some mitigations can be used, e.g. restrict access via a specific management VLAN, implement network ACL elsewhere, and use a different password to that on secure devices, but you can’t overcome the device limitations completely.