Hi,
I used these lines from the file squid.conf.frontierdefault
acl HOST_MONITOR src 131.225.209.5/32 localhost frontier.cern.ch
acl HOST_MONITOR_NAME srcdomain cmsdbsfrontier.cern.ch
acl snmppublic snmp_community public
snmp_access allow snmppublic HOST_MONITOR
snmp_access allow snmppublic HOST_MONITOR_NAME
snmp_access deny all
snmp_port 3401
when it wasn't working I had
acl SNMPHOSTS src 128.142.202.0/24 localhost
snmp_access allow snmppublic SNMPHOSTS
instead of
acl HOST_MONITOR src 131.225.209.5/32 localhost frontier.cern.ch
acl HOST_MONITOR_NAME srcdomain cmsdbsfrontier.cern.ch
snmp_access allow snmppublic HOST_MONITOR
snmp_access allow snmppublic HOST_MONITOR_NAME
I might be reading it wrong but the only difference seems to be the
Fermilab subnet, because frontier.cern.ch and cmsdbsfrontier.cern.ch are
the same host (128.142.202.212) and it belongs to subnet
128.142.202.0/24. srcdomain ACL does a just a reverse lookup respect to src.
cheers
alessandra
|