SNMP Interface Binding

When I enable the SNMP service in Server 2003, the snmp service binds to
0.0.0.0 therefore it listens on every network interface.

I have multiple nics and I would like to have the snmp service only bind to
one of the interfaces.

Is there a way to do this?

hello,

I can't find a registry setting to restrict snmp from binding all
interfaces.

You may use port filtering to restrict access from others interfaces.

In my opinion, using a robust community (@$MP34jg_!=) and restricting by IP
is the best.
We had an external audit and they couldn't do anything with the snmp service

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Skispcs" <(E-Mail Removed)> wrote in message
newsCC0C01B-BACC-4AC7-85B4-(E-Mail Removed)...
> When I enable the SNMP service in Server 2003, the snmp service binds to
> 0.0.0.0 therefore it listens on every network interface.
>
> I have multiple nics and I would like to have the snmp service only bind
> to
> one of the interfaces.
>
> Is there a way to do this?

I thought it might me just in the normal properties of the connection right
on the list along with:

File and Print Sharing
QoS Packet Scheduler
Internet Protocol (TCP/IP)
SNMP [Services or Agent or something?]

And you would just uncheck the checkbox to unbind it from that nic.
I don't run it on anything I have close at hand or I could look to verify
it.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


"Mathieu CHATEAU" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> hello,
>
> I can't find a registry setting to restrict snmp from binding all
> interfaces.
>
> You may use port filtering to restrict access from others interfaces.
>
> In my opinion, using a robust community (@$MP34jg_!=) and restricting by
> IP is the best.
> We had an external audit and they couldn't do anything with the snmp
> service
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "Skispcs" <(E-Mail Removed)> wrote in message
> newsCC0C01B-BACC-4AC7-85B4-(E-Mail Removed)...
>> When I enable the SNMP service in Server 2003, the snmp service binds to
>> 0.0.0.0 therefore it listens on every network interface.
>>
>> I have multiple nics and I would like to have the snmp service only bind
>> to
>> one of the interfaces.
>>
>> Is there a way to do this?
>

good try, but it doesn't !
It's not binded to an interface

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Phillip Windell" <(E-Mail Removed)> wrote in message
news:eFxcV$(E-Mail Removed)...
>I thought it might me just in the normal properties of the connection right
>on the list along with:
>
> File and Print Sharing
> QoS Packet Scheduler
> Internet Protocol (TCP/IP)
> SNMP [Services or Agent or something?]
>
> And you would just uncheck the checkbox to unbind it from that nic.
> I don't run it on anything I have close at hand or I could look to verify
> it.
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or
> Microsoft, or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
>
> "Mathieu CHATEAU" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> hello,
>>
>> I can't find a registry setting to restrict snmp from binding all
>> interfaces.
>>
>> You may use port filtering to restrict access from others interfaces.
>>
>> In my opinion, using a robust community (@$MP34jg_!=) and restricting by
>> IP is the best.
>> We had an external audit and they couldn't do anything with the snmp
>> service
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Skispcs" <(E-Mail Removed)> wrote in message
>> newsCC0C01B-BACC-4AC7-85B4-(E-Mail Removed)...
>>> When I enable the SNMP service in Server 2003, the snmp service binds to
>>> 0.0.0.0 therefore it listens on every network interface.
>>>
>>> I have multiple nics and I would like to have the snmp service only bind
>>> to
>>> one of the interfaces.
>>>
>>> Is there a way to do this?
>>
>
>

Thank you for the replies,

LIke I said I have multiple NIC cards in this machine and I would like to
have the SNMP only bound to one nic or ip address. I have another SNMP
application I am developing that I want to have bound to port 161 on the
other nic.

The problem is that the SNMP service binds to all of the interfaces and when
I start my app, the socket is already in use.

I looked through the settings and googled for a few hours but I am coming up
empty on this one.


"Mathieu CHATEAU" wrote:

> good try, but it doesn't !
> It's not binded to an interface
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "Phillip Windell" <(E-Mail Removed)> wrote in message
> news:eFxcV$(E-Mail Removed)...
> >I thought it might me just in the normal properties of the connection right
> >on the list along with:
> >
> > File and Print Sharing
> > QoS Packet Scheduler
> > Internet Protocol (TCP/IP)
> > SNMP [Services or Agent or something?]
> >
> > And you would just uncheck the checkbox to unbind it from that nic.
> > I don't run it on anything I have close at hand or I could look to verify
> > it.
> >
> > --
> > Phillip Windell
> > www.wandtv.com
> >
> > The views expressed, are my own and not those of my employer, or
> > Microsoft, or anyone else associated with me, including my cats.
> > -----------------------------------------------------
> >
> >
> > "Mathieu CHATEAU" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> >> hello,
> >>
> >> I can't find a registry setting to restrict snmp from binding all
> >> interfaces.
> >>
> >> You may use port filtering to restrict access from others interfaces.
> >>
> >> In my opinion, using a robust community (@$MP34jg_!=) and restricting by
> >> IP is the best.
> >> We had an external audit and they couldn't do anything with the snmp
> >> service
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> http://lordoftheping.blogspot.com
> >>
> >>
> >> "Skispcs" <(E-Mail Removed)> wrote in message
> >> newsCC0C01B-BACC-4AC7-85B4-(E-Mail Removed)...
> >>> When I enable the SNMP service in Server 2003, the snmp service binds to
> >>> 0.0.0.0 therefore it listens on every network interface.
> >>>
> >>> I have multiple nics and I would like to have the snmp service only bind
> >>> to
> >>> one of the interfaces.
> >>>
> >>> Is there a way to do this?
> >>
> >
> >
>
>

Hello,

i think you can't restrict the snmp service to one interface.

The ugly way is to start your application before the snmp service, so you
will bind the interface before. You may add dependency to be sure your
service start before the snmp.

That's not smart & clean.


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Skispcs" <(E-Mail Removed)> wrote in message
news:8EC05BCE-4077-41F0-B529-(E-Mail Removed)...
> Thank you for the replies,
>
> LIke I said I have multiple NIC cards in this machine and I would like to
> have the SNMP only bound to one nic or ip address. I have another SNMP
> application I am developing that I want to have bound to port 161 on the
> other nic.
>
> The problem is that the SNMP service binds to all of the interfaces and
> when
> I start my app, the socket is already in use.
>
> I looked through the settings and googled for a few hours but I am coming
> up
> empty on this one.
>
>
> "Mathieu CHATEAU" wrote:
>
>> good try, but it doesn't !
>> It's not binded to an interface
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Phillip Windell" <(E-Mail Removed)> wrote in message
>> news:eFxcV$(E-Mail Removed)...
>> >I thought it might me just in the normal properties of the connection
>> >right
>> >on the list along with:
>> >
>> > File and Print Sharing
>> > QoS Packet Scheduler
>> > Internet Protocol (TCP/IP)
>> > SNMP [Services or Agent or something?]
>> >
>> > And you would just uncheck the checkbox to unbind it from that nic.
>> > I don't run it on anything I have close at hand or I could look to
>> > verify
>> > it.
>> >
>> > --
>> > Phillip Windell
>> > www.wandtv.com
>> >
>> > The views expressed, are my own and not those of my employer, or
>> > Microsoft, or anyone else associated with me, including my cats.
>> > -----------------------------------------------------
>> >
>> >
>> > "Mathieu CHATEAU" <(E-Mail Removed)> wrote in message
>> > news:(E-Mail Removed)...
>> >> hello,
>> >>
>> >> I can't find a registry setting to restrict snmp from binding all
>> >> interfaces.
>> >>
>> >> You may use port filtering to restrict access from others interfaces.
>> >>
>> >> In my opinion, using a robust community (@$MP34jg_!=) and restricting
>> >> by
>> >> IP is the best.
>> >> We had an external audit and they couldn't do anything with the snmp
>> >> service
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> http://lordoftheping.blogspot.com
>> >>
>> >>
>> >> "Skispcs" <(E-Mail Removed)> wrote in message
>> >> newsCC0C01B-BACC-4AC7-85B4-(E-Mail Removed)...
>> >>> When I enable the SNMP service in Server 2003, the snmp service binds
>> >>> to
>> >>> 0.0.0.0 therefore it listens on every network interface.
>> >>>
>> >>> I have multiple nics and I would like to have the snmp service only
>> >>> bind
>> >>> to
>> >>> one of the interfaces.
>> >>>
>> >>> Is there a way to do this?
>> >>
>> >
>> >
>>
>>

What will do your application ? You may plug it with the snmp service ?

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Skispcs" <(E-Mail Removed)> wrote in message
news:8EC05BCE-4077-41F0-B529-(E-Mail Removed)...
> Thank you for the replies,
>
> LIke I said I have multiple NIC cards in this machine and I would like to
> have the SNMP only bound to one nic or ip address. I have another SNMP
> application I am developing that I want to have bound to port 161 on the
> other nic.
>
> The problem is that the SNMP service binds to all of the interfaces and
> when
> I start my app, the socket is already in use.
>
> I looked through the settings and googled for a few hours but I am coming
> up
> empty on this one.
>
>
> "Mathieu CHATEAU" wrote:
>
>> good try, but it doesn't !
>> It's not binded to an interface
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Phillip Windell" <(E-Mail Removed)> wrote in message
>> news:eFxcV$(E-Mail Removed)...
>> >I thought it might me just in the normal properties of the connection
>> >right
>> >on the list along with:
>> >
>> > File and Print Sharing
>> > QoS Packet Scheduler
>> > Internet Protocol (TCP/IP)
>> > SNMP [Services or Agent or something?]
>> >
>> > And you would just uncheck the checkbox to unbind it from that nic.
>> > I don't run it on anything I have close at hand or I could look to
>> > verify
>> > it.
>> >
>> > --
>> > Phillip Windell
>> > www.wandtv.com
>> >
>> > The views expressed, are my own and not those of my employer, or
>> > Microsoft, or anyone else associated with me, including my cats.
>> > -----------------------------------------------------
>> >
>> >
>> > "Mathieu CHATEAU" <(E-Mail Removed)> wrote in message
>> > news:(E-Mail Removed)...
>> >> hello,
>> >>
>> >> I can't find a registry setting to restrict snmp from binding all
>> >> interfaces.
>> >>
>> >> You may use port filtering to restrict access from others interfaces.
>> >>
>> >> In my opinion, using a robust community (@$MP34jg_!=) and restricting
>> >> by
>> >> IP is the best.
>> >> We had an external audit and they couldn't do anything with the snmp
>> >> service
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> http://lordoftheping.blogspot.com
>> >>
>> >>
>> >> "Skispcs" <(E-Mail Removed)> wrote in message
>> >> newsCC0C01B-BACC-4AC7-85B4-(E-Mail Removed)...
>> >>> When I enable the SNMP service in Server 2003, the snmp service binds
>> >>> to
>> >>> 0.0.0.0 therefore it listens on every network interface.
>> >>>
>> >>> I have multiple nics and I would like to have the snmp service only
>> >>> bind
>> >>> to
>> >>> one of the interfaces.
>> >>>
>> >>> Is there a way to do this?
>> >>
>> >
>> >
>>
>>