SNMP protocol version 1 and 3 daemon
Syntax:
snmpd user NAME (add|set) [pass PASSWORD] [sec[urity] (noAuthNoPriv|authNoPriv|authPriv)] [acc[essRights] (readOnly|readWrite)] [cla[ss] (guest|admin)] [privpass PRIVPASS] [proto <privacy protocol>]
snmpd user NAME del[ete]
snmpd comm[unity] NAME
snmpd (nodebug|debug [prox] [trap] [stat] [mibs] [user] [cryp] [pack] [time] [flow])
snmpd (v1disable|v1enable)
snmpd (start|stop)
snmpd clear
This command enables/disables the SNMP (Simple Network Management Protocol) Version 1 and 3 daemon.
SNMP protocol support is an important feature of all communication devices because it allows the system administrator to use a uniform mechanism to manage the operation of a network as a whole and of every its component individually.
Although the first version of the SNMP protocol lacks security in the operation of the protocol itself, which hinders its use for network management, it is widely used to monitor and analyze network operation. MIB variables changing are turned off for the first version; it works only in read-only mode. "v1disable" option disables 1st version support completely and slightly fastens incoming SNMP-requests processing.
Support of SNMP-V3 with USM (User-based Security Model), MD5 authentication and encoding are also available. For access granting, a user with username, access passwords and access rights (with or without authentication and encoding) is created.
In “snmpd” command "accessRights" can be set to provide access management of the recourses. "ReadOnly|readWrite" parameters allow only reading or also changing some variables. "Class guest/admin" allows providing limited or full access to the variables.
The default SNMP v1 community name for read operations is "public". The “snmpd community NAME” command allows changing the default community name.
The present implementation supports MIB II (Management Information Base, Version II) and MIB Enterprise and is very easy to configure.
The following SNMP security options can be used by setting the “sec[urity]” parameter:
- "noAuthNoPriv" – SNMP messages are sent unauthenticated and unencoded.
- "authNoPriv" – SNMP messages are sent authenticated and unencoded.
- "authPriv" – SNMP messages are sent authenticated and encoded. The passphrase for the encoding is set by the “privpass PRIVPASS” parameter. The protocol is set by the “proto (<privacy protocol>)” parameter.
The “nodebug/debug” options disables/enables printing of SNMP service information into the system log.
The “snmpd clear” command deletes SNMP configuration on the unit.
Example,
snmpd comm secret snmpd user john add pass mypassword security authNoPriv snmpd on