SNMP monitoring a school router

[Rawns]

I'm utilising Autotask Endpoint Management for monitoring network devices using SNMP within a site's infrastructure (things like NAS drives, AP's, switches, printers etc). So far, it's going well however one thing that has cropped up and I'm a little unsure of is SNMP monitoring of a sites primary router. It seems that the SNMP functionality is currently disabled on the router and to be honest, I'm not 100% on the implications that could arise by enabling it, being the gateway into the sites network. A quick Google typically returns articles where half seem to say don't enable it, and they other half say there is no problem with enabling it. I'm not comfortable with enabling it until I can understand the full range of positives/negatives and potential security issues it could open. Can anyone advise why SNMP should be enabled/disabled?

 

Edit: Do'h! Thought I posted this in the networks section!

Edited March 29, 2018 by Rawns

[pete]

Can you configure it just to listen on the internal interface, only accept connections from your monitoring box and use snmp v3 to secure it?