RE: SNMP configuration

From: Cowles, Steve (steve_at_stevecowles.com)
Date: 07/18/04

  • Next message: Matthew Saltzman: "Re: htmlview using wrong browswer" 
    To: "'For users of Fedora Core releases'" <fedora-list@redhat.com>
Date: Sun, 18 Jul 2004 09:01:55 -0500

    Franco wrote:
    > Hi, i need to configure SNMP, i noticied that snmpd daemon is
    > workink but i can't read the community from mrtg on the same
    > network but on other server.
    > Can anyone tell me how i need to configure snmpd.conf?
    > Thanks.

    I have always edited the second example in snmpd.conf to meet my
    requirements (see below). Notice the second com2sec line matches my internal
    LAN address space. i.e. snmp queries coming from 192.168.8.0/22 are
    Read-Only, use the community of MyROComm and can be v1 or v2c based.

    Steve Cowles

    -------------------------------------------
    com2sec local localhost MyRWComm
    com2sec lan 192.168.8.0/22 MyROComm
     
    ## group.name sec.model sec.name
    group MyRWGroup v1 local
    group MyROGroup v1 lan
    group MyRWGroup v2c local
    group MyROGroup v2c lan

    ## incl/excl subtree mask
    view all included .1 80
     
    ## context sec.model sec.level prefix read write notif
    access MyROGroup "" any noauth exact all none none
    access MyRWGroup "" any noauth exact all all all 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Matthew Saltzman: "Re: htmlview using wrong browswer"

    Relevant Pages

    • [NEWS] D-Link DWL-1000AP can be Compromised Due to Insecure SNMP Configuration
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... allows an attacker to gain the administrative password using a simple SNMP ... A MIB walk using the read-only SNMP community of 'public' (default ... read-only community for most devices) can allow an attacker access to the ...
      (Securiteam)
    • SNMP versions and Community names
      ... I'm a bit of a newb to SNMP so be gentle. ... I'm trying to get a network monitoring tool working for the printers ... I've been attempting to configure the read and set community names on ... can walk the MIB using the MIB browser I know I've set the read ...
      (comp.protocols.snmp)
    • SNMP versions and their use of Community names
      ... I'm a bit of a newb to SNMP so be gentle. ... I'm trying to get a network monitoring tool working for the printers ... I've been attempting to configure the read and set community names on ... can walk the MIB using the MIB browser I know I've set the read ...
      (comp.protocols.snmp)
    • SNMP versions and Community names
      ... I'm a bit of a newb to SNMP so be gentle. ... I'm trying to get a network monitoring tool working for the printers ... I've been attempting to configure the read and set community names on ... can walk the MIB using the MIB browser I know I've set the read ...
      (comp.protocols.snmp)
    • D-Link DWL-1000AP can be compromised because of SNMP configuration
      ... used SNMP, I performed a MIB walk to obtain the ... default read-only community for most devices). ... accessing the HTTP configuration page of the ...
      (Bugtraq)