Download User Manual - EndRun Technologies

SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP)
puser to be created who may be authenticated using the Secure Hash Algorithm (SHA) with password
Sonoma_0. Passwords and passphrases must have a minimum of 8 characters, or you will not be able
to be authenticated.
IMPORTANT
You must kill the snmpd daemon prior to editing, /boot/net-snmp/snmpd.conf. Otherwise, the secret
key creation may not complete properly. Issue the command /etc/rc.d/rc.snmpd stop to kill
the snmpd daemon. You can verify that the snmpd daemon has been killed by issuing the ps -e
command and verifying that it is not present.
After rebooting, the agent will read the /boot/net-snmp/snmpd.conf configuration file and compute
secret key(s) for each of the users and delete the createUser lines from the file. It will then write
the secret key(s) to the file. These lines begin with the string, usmUser. In this way, un-encrypted
passwords are not stored on the system.
IMPORTANT
To generate new keys, stop the snmpd process, delete the existing usmUser key lines from the file
/boot/net-snmp/snmpd.conf and then add new createUser lines. Then reboot the system.
This example gives the simplest configuration to begin using SNMPv3 but doesn’t make use of the
full capabilities of the VACM in defining groups and views for fine-grained access control. The factory default /etc/snmpd.conf file contains commented blocks of lines that can be uncommented to give
you a basic configuration that uses the User-based Security Model (USM) described in RFC-2274 and
the View-based Access Control Model (VACM) described in RFC-2275. The comments included in
the file should help you in modifying it for your specific requirements.
Disable or
Restrict Access
To disable SNMP, see Chapter 5 - Security, Disable SNMP, SSH and HTTPS. To restrict access to
specific hosts see Chapter 5 - Security, Restrict Access - Telnet, SSH and SNMP.
53
Sonoma User Manual