Hi, customer wants to access Meraki devices instead of accessing the dashboard snmp mib. I have been taking a look at Meraki's reference document. According to it, you can provide RO access just activating a snmp community at template level. As customer NMS is located in his DC, snmp traffic will take the AutoVPN path. Hence it would be encrypted. That's fine, as they still use snmp v2C.
https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/SNMP_Overview_and_C...
My doubts are:
1.- OK, MS and MR I guess they are exposing their LAN/Management IP addresses. Just activating the community at template level it would expose an IP per device?
2.- What about the MX? Reading at the documentation it mentions a local internet fw inbound rule must allow snmp flows (Meraki is talking about internet snmp access, not AutoVPN) and that makes me thing they could be exposing just the wan interface public IP address. What if the MX comprises more than one LAN subnet. Would it expose both the wan uplink and also all local vlans?, just one? None?
Have anyone tried to access meraki devices using snmp thru AutoVPN so could be in position to solve these doubts?
Thanks!
