Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

potential parsing bug on snmp-server

#16

potential parsing bug on snmp-server

Rule syntax errors output:
Checks for syntax errors in rules.

342: Parse error at "community" on line: snmp-server host inside
10.200.3.254 community cr!6eJgd version 2c "

346: Parse error at "snmp" on line: snmp-server enable traps snmp
authentication linkup linkdown coldstart "

347: Parse error at "syslog" on line: snmp-server enable traps syslog "

348: Parse error at "entity" on line: snmp-server enable traps entity
config-change "
FIREWALL RULES
342 snmp-server host inside 10.200.3.254 community Fak3SNMp! version 2c
346 snmp-server enable traps snmp authentication linkup linkdown coldstart
347 snmp-server enable traps syslog
348 snmp-server enable traps entity config-change

The PIX command reference only lists the following as syntactically correct:
[no] snmp-server community key [no] snmp-server {contact | location} text [no] snmp-server host [if_name] ip_addr [trap | poll] [no] snmp-server enable traps

However, when searching GOOG for "snmp-server enable traps", I find
the following links which show alternate syntax for the snmp-server
command:
http://ciscosystems.com/en/US/tech/tk648/tk362/technologies_tech_no...
http://www.ciscosecure.com/en/US/docs/ios/12_3/configfun/command/re...

but the links seem to reference Cisco IOS.

I don't know if the commands works in PIX/ASA or not and I don't have
any devices to test on but I know for sure that the config comes from
a running config so that means that the config file loads on the
device despite the PIX command reference syntax:

ciscoasa# sh run
: Saved : ASA Version 8.0(4)
! hostname ciscoasa

Reported by jrk · April 14th, 2010 @ 06:28 PM

State: hold
Milestone: none
Assigned to: Craig Bugzefsky Craig Bugzefsky

Activity

  1. Craig Bugzefsky
    Craig Bugzefsky
    • State changed from new to hold

    There is not a clean way to handle this syntax in are parser right now, and people still have access to the lexemes. I'm putting this on hold for now, since there are not checks that depend on it, and there are workarounds.

    May 13th, 2010 @ 08:36 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.