From 7617200245b4f9ab09f8ba7bc704e99bbf225845 Mon Sep 17 00:00:00 2001 From: elie Date: Fri, 2 Nov 2012 10:53:03 +0000 Subject: [PATCH] example configuration for Net-SNMP's snmptrapd added --- CHANGES.txt | 1 + docs/net-snmpd.conf | 8 +++--- docs/net-snmptrapd.conf | 57 +++++++++++++++++++++++++++++++++++++++++ 3 files changed, 62 insertions(+), 4 deletions(-) create mode 100644 docs/net-snmptrapd.conf diff --git a/CHANGES.txt b/CHANGES.txt index 7ffb58a3..4f0fd80d 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -11,6 +11,7 @@ Revision 4.2.4 - Attempt to convert Windows style EOL into UNIX ones in MIB source modules appeared to be unnecessary and even destructive to modules data in some cases. So the convertion code removed altogether. +- Example configuration for Net-SNMP's snmptrapd added. Revision 4.2.3 -------------- diff --git a/docs/net-snmpd.conf b/docs/net-snmpd.conf index a2de91e6..f0e0d9d6 100644 --- a/docs/net-snmpd.conf +++ b/docs/net-snmpd.conf @@ -1,8 +1,9 @@ -# To run the examples shipped with this distribution with a Net-SNMP -# Agent (snmpd) listening at your localhost, the following configuration -# tokens should be put into: +# To run Command Generator examples shipped with this distribution with +# a Net-SNMP Agent (snmpd) listening at your localhost, the following +# configuration tokens should be put into: # ... /var/lib/net-snmp/snmpd.conf (while snmpd is down) + createUser usr-md5-des MD5 authkey1 DES privkey1 createUser usr-md5-none MD5 authkey1 createUser usr-none-none @@ -40,4 +41,3 @@ view pysnmpview included .1 access PySNMPGroup "" any noauth exact pysnmpview pysnmpview pysnmpview access PySNMPGroup "" any auth exact pysnmpview pysnmpview pysnmpview access PySNMPGroup "" any priv exact pysnmpview pysnmpview pysnmpview - diff --git a/docs/net-snmptrapd.conf b/docs/net-snmptrapd.conf new file mode 100644 index 00000000..917f8898 --- /dev/null +++ b/docs/net-snmptrapd.conf @@ -0,0 +1,57 @@ +# To run the Notification Originator examples shipped with this distribution +# against Net-SNMP's snmptrapd daemon (which actually acts the Manager role) +# listening at your localhost, the following configuration +# tokens should be put into: + +# +# ... /var/lib/net-snmp/snmptrapd.conf (while snmptrapd is down) +# + +# this is to make SNMPv3 INFORMs working +createUser usr-md5-des MD5 authkey1 DES privkey1 +createUser usr-md5-none MD5 authkey1 +createUser usr-none-none +createUser usr-sha-des SHA authkey1 DES privkey1 +createUser usr-sha-none SHA authkey1 +createUser usr-sha-aes SHA authkey1 AES privkey1 +createUser usr-sha-aes128 SHA authkey1 AES privkey1 +createUser usr-md5-aes MD5 authkey1 AES privkey1 +createUser usr-md5-aes128 MS5 authkey1 AES privkey1 + +# this is to make SNMPv3 TRAPs working with Notification Originator having +# snmpEngineId = 8000000001020304 +createUser -e 0x8000000001020304 usr-md5-des MD5 authkey1 DES privkey1 +createUser -e 0x8000000001020304 usr-md5-none MD5 authkey1 +createUser -e 0x8000000001020304 usr-none-none +createUser -e 0x8000000001020304 usr-sha-des SHA authkey1 DES privkey1 +createUser -e 0x8000000001020304 usr-sha-none SHA authkey1 +createUser -e 0x8000000001020304 usr-sha-aes SHA authkey1 AES privkey1 +createUser -e 0x8000000001020304 usr-sha-aes128 SHA authkey1 AES privkey1 +createUser -e 0x8000000001020304 usr-md5-aes MD5 authkey1 AES privkey1 +createUser -e 0x8000000001020304 usr-md5-aes128 MS5 authkey1 AES privkey1 + +# +# ... and the following options into /etc/snmpd/snmptrapd.conf +# + +# the snmptrapd will listen on all local IPv4 & IPv6 interfaces +snmpTrapdAddr udp:0.0.0.0:162,udp6:[::]:162 + +# this is to make SNMPv1 TRAPs and SNMPv2c TRAPs/INFORMs working +authCommunity log,execute,net public + +# this is to make SNMPv3 TRAPs/INFORMs working +authUser log usr-md5-des priv +authUser log usr-md5-none +authUser log usr-none-none noauth +authUser log usr-sha-des priv +authUser log usr-sha-none +authUser log usr-sha-aes priv +authUser log usr-sha-aes128 priv +authUser log usr-md5-aes priv +authUser log usr-md5-aes128 priv + +# other settings +doNotRetainNotificationLogs yes +doNotLogTraps no +doNotFork no