Security Basics mailing list archives

Re: SNMPD in RED HAT


From: Rob Hughes <rob () robhughes com>
Date: Tue, 12 Oct 2004 06:38:44 -0500

On Tue, 2004-10-05 at 18:43 -0700, Carlos Garcia wrote:
Hi, can somebody help me i have the solar winds and im trying to use the
Bandwidth Monitor with one RH Linux Server but do i have to use the snmpd?
and how can i configure it to work with the monitor?


1) Make sure snmp is installed. Use "rpm -q net-snmp". If it says net-
snmp is not installed, install it from either the cds, apt, or whatever
you use. If you need help with this part, contact me off-line.

2) Make sure snmp is set to start on system boot with "chkconfig snmpd
--level 345 on". 

3) In /etc/snmp, edit the snmpd.conf. For a basic snmp configuration,
you have to edit, or if not present add, the parameters "rocommunity"
and "rwcommunity". They should be in the form of "rocommunity
<community_string> <allowed_query_source>" and "rwcommunity
<community_string> <allowed_query_source>". These will be the snmp
"passwords" for read-only and read-write for both snmp v1 and snmp v2c.
If you want to use snmp v3, the configuration is a bit more complex, but
"man snmpd.conf" will tell you everything you need to know. Also, you
can run "snmpconf" which is a wizardy-style configuration tool and it
can help you set up snmpd.conf. But don't skip this step. By default,
snmpd uses private and public for community strings and allows queries
from anywhere. This is one of the first things most crackers check for
when trying to get access.

4) Start snmpd with "/etc/init.d/snmpd start". It should say snmpd was
started.

5) Try doing a "snmpwalk -c <community_string> -v2c <ip_of_your_server>"
from your monitoring station. You should get whole screens full of
stuff. If that worked, you're good to go. Just set up the parameters you
want to monitor. If it didn't work, double check your settings. You
might also want to add 127.0.0.0/8 as an allowed ro query source, so you
can trouble shoot from the console.

Regards,
Rob


Current thread: