Shulou(Shulou.com)06/01 Report--

This article mainly introduces "how to configure SNMPv3 on the ubuntu 15.04server". In the daily operation, I believe many people have doubts about how to configure SNMPv3 on the ubuntu 15.04server. The editor consulted all kinds of materials and sorted out simple and easy-to-use operation methods. I hope it will be helpful to answer the doubts of "how to configure SNMPv3 on the ubuntu 15.04server". Next, please follow the editor to study!

Simple Network Management Protocol (SNMP) is an "Internet standard protocol that can be used to manage devices on IP networks." Devices that typically support SNMP include routers, switches, servers, workstations, printers, modems, and more. It is most commonly used in network management systems to monitor devices connected to the network and pay attention to whether there are any situations that should require the attention of administrators. SNMP is part of the Internet Protocol set (Internet Protocol Suite) defined by the Internet Engineering Task Force (IETF). It includes a set of network management standards, including application layer protocols, database schemas and a set of data objects.

SNMP exposes management data on the managed system in this way, and variables describe the system configuration. These changes can then be queried (and sometimes set by the management application) by the management application.

Why should you use SNMPv3?

Although SNMPv3 has not made any changes to the SNMP protocol except by adding encryption security, it looks very different because of new text conventions, outlines, and terminology.

SNMPv3 mainly adds security and remote configuration improvements to SNMP.

From the beginning, security has always been a soft threat to SNMP. The validation in SNMP version 1 and version 2 is nothing more than a password (a shared string) sent in clear text between the manager and the agent. Each SNMPv3 message contains security parameters, which are encoded into octal strings. The meaning of these security parameters depends on the security model used.

SNMPv3 provides several important security features:

Confidentiality-encrypts packets to prevent unauthorized people from snooping.

Integrity-message integrity to ensure that packets are not tampered with during transmission, including an optional packet playback protection mechanism.

Authentication-confirms that the message was sent from a legitimate source.

Install the SNMP server and client software in ubuntu

Open the terminal and run the following command:

Sudo apt-get install snmpd snmp

After installation, you need to make the following changes.

Configure SNMPv3 in Ubuntu

Access the daemon from the outside.

The default installation only provides access to the localhost daemon. To get access from outside, open the file / etc/default/snmpd in your usual editing tool.

Sudo vi / etc/default/snmpd

Change the following line to

SNMPDOPTS='-Lsd-Lf / dev/null-u snmp-g snmp-I-smux,mteTrigger,mteTriggerConf-p / var/run/snmpd.pid'

Replace it with

SNMPDOPTS='-Lsd-Lf / dev/null-u snmp-I-smux-p / var/run/snmpd.pid-c / etc/snmp/snmpd.conf'

Then restart snmpd:

Sudo / etc/init.d/snmpd restart

Define SNMPv3 user, authentication, and encryption parameters

SNMPv3 can be used in many ways, depending on the "securityLevel" (security level) configuration parameter:

NoAuthNoPriv-- has no authorization, no encryption, and basically no security to speak of!

AuthNoPriv-- requires authorization, but the collected data sent over the network is not encrypted.

AuthPriv-- this is a kind of security. Authorization is required and all data sent over the network is encrypted.

The snmpd configuration settings are saved in a file called / etc/snmp/snmpd.conf. Open the file with your usual editing tools:

Sudo vi / etc/snmp/snmpd.conf

Add the following lines to the end of the file:

# createUser user1createUser user2 MD5 user2passwordcreateUser user3 MD5 user3password DES user3encryption#rouser user1 noauth 1.3.6.1.2.1.1rouser user2 auth 1.3.6.1.2.1rwuser user3 priv 1.3.6.1.2.1

Note: if you want to use your own username / password combination, you need to note that passwords and encrypted phrases should be at least 8 characters long.

In addition, you need to make the following changes so that snmp can listen for connections on all interfaces:

By

# agentAddress udp:161,udp6: [:: 1]: 161

Become

AgentAddress udp:161,udp6: [:: 1]: 161

Save the modified snmpd.conf file and restart the daemon with the following command:

Sudo / etc/init.d/snmpd restart at this point, the study on "how to configure SNMPv3 on ubuntu 15.04server" is over. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.