- Dependencies
Log on to a TIE Server appliance and install the base SNMP packages available in/apps . Follow the recommended steps for configuration.
- Install Packages
For TIE Server 2.1.0:Download the RPMs attached to this article and copy them to the appliance. For example, to the home of the administrator user, assuming it is/home/admin .
cd /home/admin
rpm -Uvh net-snmp-libs-5.5-60.mlos2.x86_64.rpm net-snmp-5.5-60.mlos2.x86_64.rpm net-snmp-utils-5.5-60.mlos2.x86_64.rpm
For TIE Server up to 2.0.0:NOTE: Upgrade to the latest version, if possible.
cd /apps
rpm -ivh net-snmp-5.5-54.mlos2.x86_64.rpm net-snmp-utils-5.5-54.mlos2.x86_64.rpm
- Configuration
Configure the SNMP service according to your monitoring needs, and then restart the service. The actual configuration is specific to each environment and monitoring approach. The same context ID must be used when remotely accessing SNMP data to secure the exchange. Run the following commands on the appliance:
For SNMP# SNMP configuration
cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.backup
v2c :
vi /etc/snmp/snmpd.conf
Replace/etc/snmp/snmpd.conf content with the following example configuration:
For SNMP v3:# Map 'idv90we3rnov90wer' community to the 'ConfigUser'
# Map '209ijvfwer0df92jd' community to the 'AllUser'
# sec.name source community
com2sec ConfigUser default idv90we3rnov90wer
com2sec AllUser default 209ijvfwer0df92jd
# Map 'ConfigUser' to 'ConfigGroup' for SNMP Version 2c
# Map 'AllUser' to 'AllGroup' for SNMP Version 2c
# sec.model sec.name
group ConfigGroup v2c ConfigUser
group AllGroup v2c AllUser
# Define 'SystemView', which includes everything under .1.3.6.1.2.1.1 (or .1.3.6.1.2.1.25.1)
# Define 'AllView', which includes everything under .1
# incl/excl subtree
view SystemView included .1.3.6.1.2.1.1
view SystemView included .1.3.6.1.2.1.25.1.1
view AllView included .1
# Give 'ConfigGroup' read access to objects in the view 'SystemView'
# Give 'AllGroup' read access to objects in the view 'AllView'
# context model level prefix read write notify
access ConfigGroup "" any noauth exact SystemView none none
access AllGroup "" any noauth exact AllView none none
dontLogTCPWrappersConnects yes
- Stop the snmp service if it is running:
service snmpd stop
- Create two different users, which have different visibility of the MIB tree:
net-snmp-create-v3-user -ro -A "AUTHENTICATION_PASSWORD" -X "ENCRYPTION_PASSWORD" -a SHA -x AES TIESnmpRoUser
net-snmp-create-v3-user -ro -A "ADMIN_AUTHENTICATION_PASSWORD" -X "ADMIN_ENCRYPTION_PASSWORD" -a SHA -x AES TIESnmpRoAdmin
- Replace the AUTHENTICATION_PASSWORD, ENCRYPTION_PASSWORD, ADMIN_AUTHENTICATION_PASSWORD and ADMIN_ENCRYPTION_PASSWORD with strong passwords or passphrases, to be used for authentication and encryption.
vi /etc/snmp/snmpd.conf
- Replace
/etc/snmp/snmpd.conf content with the following example configuration:
rouser TIESnmpRoUser priv .1.3.6.1.2.1.1
rouser TIESnmpRoUser priv .1.3.6.1.2.1.25.1.1
rouser TIESnmpRoAdmin priv .1
dontLogTCPWrappersConnects yes
- Stop the snmp service if it is running:
How to enable host-level SNMP monitoring through Nagios
Technical Articles ID:
KB88314
Last Modified: 1/8/2021
Last Modified: 1/8/2021