Login or Register to Ask a Question and Join Our Community


AIX

Disabling SNMP in AIX 7.1

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems AIX Disabling SNMP in AIX 7.1
# 1  
Old 04-13-2016
Disabling SNMP in AIX 7.1
Hi,

I am planning to disable SNMP in our AIX LPARs. wanted to see by disabling in a test LPAR.
before that, I would like to check disabling this SNMP will impact any of our application or database in anyway. what kind of other software depends on these SNMP daemons ?

Can you please let me know the exact use of SNMP in AIX. I understand that SNMP is used to collect information about network connected servers/routes/devices etc. (will it affect NFS file systems ? )
ours is a small shop. we never used SNMP config files to setup anything specially.


Code:
[root@testlpar]/root>which snmpd
/usr/sbin/snmpd
[root@testlpar]/root>ls -ltr /usr/sbin/snmpd
lrwxrwxrwx    1 root     system            9 Jan 07 2015  /usr/sbin/snmpd -> snmpdv3ne
lrwxrwxrwx    1 root     system            8 Jan 07 2015  /usr/sbin/clsnmp -> clsnmpne

[root@testlpar]/home/tesusr>cd /etc/snmp
snmpd.boots     snmpd.conf      snmpd.peers     snmpdv3.conf    snmpinterfaces/ snmpmibd.conf

when we installed AIX 71, SNMP v3 non-encrypted version came along with it. please see details below. we never had an opportunity use SNMP agents/server for any purpose.
Code:
Subsystem         Group            PID          Status
 aixmibd          tcpip            3121214      active
 hostmibd         tcpip            3232324      active
 snmpmibd         tcpip            3323232      active
 snmpd            tcpip            3212121      active


Please let me know disabling SNMP related daemons or services will cause any issues. thank you.
Last edited by system.engineer; 04-13-2016 at 05:57 PM..
# 2  
Old 04-14-2016
if you use HACMP (PowerHA), it will cause issues with clstat and clinfo service.

It may cause problems with your monitoring, if it uses SNMP to collect information.

You may want to check your application setup. Usually applications don't require SNMP server on the AIX side, but...
# 3  
Old 04-14-2016
Thanks Agent.kgb

As I mentioned earlier, ours is a small shop. AIX is not a primary/core OS in our environment.We do not have POWERHA/HACMP and We do not have any monitoring tool for AIX. Instead we use scripts for monitoring very few servers.
we never modified any of the SNMP config files after OS installation to support application.

does this means Application will not use SNMP ?

I dont think disabling SNMP will impact

NFS filesystems
Shell script monitoring capability to send email alerts.
NTP

or any other network related services

Please clarify.

Thank you.
Last edited by system.engineer; 04-14-2016 at 12:26 PM..
# 4  
Old 04-15-2016
Quote:
Originally Posted by system.engineer
Thanks Agent.kgb

As I mentioned earlier, ours is a small shop. AIX is not a primary/core OS in our environment.We do not have POWERHA/HACMP and We do not have any monitoring tool for AIX. Instead we use scripts for monitoring very few servers.
This suggests that you do not need SNMP, but to finally answer that question you simply will have to try.

Quote:
Originally Posted by system.engineer
we never modified any of the SNMP config files after OS installation to support application.

does this means Application will not use SNMP ?
No, it doesn't. I haven't installed AIX from scratch for a long time and i am not sure what the installation default of the SNMP-daemons is, but you can simply test that:

Code:
lssrc -a | grep -e snmp -e mib

You may eventually see 4 running daemons: snmpd, aixmibd, hostmibd and snmpmibd. If so: SNMP is active. If not: then not. (duh ;-) )

If it is active: shut them offf via the SRC. The command is stopsrc -s <daemon>. See the description of the SRC (system resource controller), namely the command chssys to change the starting behaviour.

Quote:
Originally Posted by system.engineer
I dont think disabling SNMP will impact

NFS filesystems
Shell script monitoring capability to send email alerts.
NTP
No, SNMP won't affect these three either way.

Quote:
Originally Posted by system.engineer
or any other network related services
This depends on the network service and a general answer can't be given. You will have to determine which network services you need in particular and then find out if they rely on SNMP. What you have said so far indicated that you don't need it, but just try it and see what happens. In teh unlikely event of you having to start them again: use the startsrc command to start them via the SRC.

I hope this helps.

bakunin
This User Gave Thanks to bakunin For This Post:
system.engineer
# 5  
Old 04-18-2016
Thank you, this helps Smilie
# 6  
Old 04-20-2016
Just wanted to check this,

I disabled SNMP related daemons on test AIX LPARs.

on /etc/rc.tcpip file;
Code:
# Start up the Simple Network Management Protocol (SNMP) daemon
#start /usr/sbin/snmpd "$src_running"

#start /usr/sbin/snmpd "$src_running"
# Start up the snmpmibd daemon

# Start up the hostmibd daemon
#start /usr/sbin/hostmibd "$src_running"

# Start up the aixmibd daemon
#start /usr/sbin/aixmibd "$src_running"


Code:
#lssrc -a | grep -e snmp -e mib
 snmpd            tcpip                         inoperative
 aixmibd          tcpip                         inoperative
 hostmibd         tcpip                         inoperative
 snmpmibd         tcpip                         inoperative


rebooted the test AIX LPARs, But some how snmp demon/service got started.
Code:
#lssrc -a | grep tcpip
 xntpd            tcpip            6076858      active
 inetd            tcpip            6739073      active
 snmpd            tcpip            6774176      active
 muxatmd          tcpip                         inoperative
 rwhod            tcpip                         inoperative


lssrc -a | grep -e snmp -e mib
 snmpd            tcpip            6774176      active
 aixmibd          tcpip                         inoperative
 hostmibd         tcpip                         inoperative
 snmpmibd         tcpip                         inoperative


Can you please suggest on how to disable SNMP permanently on AIX (even after reboot).

Thank you.
# 7  
Old 04-21-2016
Wrench
Hello!

Quote:
Originally Posted by agent.kgb
if you use HACMP (PowerHA), it will cause issues with clstat and clinfo service.
Are you sure this is still a problem in 7.1?
What problem could occur?

As far as I remember I did this to deaktivate snmpd:
Code:
mv /opt/ibm/icc/cimom/bin/startdirsnmpd /opt/ibm/icc/cimom/bin/startdirsnmpd.OLD.15.02.2016
chrctcp -S -d snmpd
chrctcp -S -d dpid17
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. AIX

AIX native SNMP producing limited results when walking MIB tree

The company I work for has various AIX servers that I've recently migrated to AIX 7.1 (from 6.1). Some are powerHA clusters some are not. Likewise, the systems engineer that I replaced had net-snmp installed on said clustered systems. Long story short I am re-invoking AIX's native SNMP (v3) for... (1 Reply)
Discussion started by: davix
1 Replies

2. AIX

Can I get some clue on disabling SSLv1, v3 and TLS1.0 on AIX

Hi, We've a requirement to disable the protocols SSLv3, SSL v2 and TLS 1.0. And have TLS 1.2 enabled using AEAD (Authentication Encryption with Associated Data). This is the only information i have, I'm not sure how to proceed, was trying to find information using google. Can you... (6 Replies)
Discussion started by: system.engineer
6 Replies

3. AIX

Disabling entries on inetd.conf (AIX).

Hello, We're working on securing the AIX environment. started with disabling unused services on AIX. Below are the entries which are not commented on my test LPAR (even other LPARs). ntalk dgram udp wait root /usr/sbin/talkd talkd daytime stream tcp nowait root... (1 Reply)
Discussion started by: system.engineer
1 Replies

4. AIX

SNMP v2 on AIX 6.1

Hello Admins, We need to configure and setup snmp v2 on AIX 6.1 clients. I don't find snmp v2 related files on AIX servers . I see there is snmpdv3.conf and v3 installed. Where can I get snmpdv2 for AIX? Thanks in advance. (5 Replies)
Discussion started by: snchaudhari2
5 Replies

5. AIX

Disabling SSH direct access for an AIX user

Hello everyone, Can anyone help me please. I want to disable SSH direct access for an AIX user. For example, if I have USER1 and USER2. I want to disactivate direct access for USER2. The user must enter his login (USER1) and his password and then he can do su - USER2 . Thanks, (3 Replies)
Discussion started by: adilyos
3 Replies

6. AIX

Disabling an ASCI terminal in AIX versions 3 and 4

Hi, I tried to do some research on this subject, but got nothing conclusive. I have the following need: I have different servers with AIX versions 3.2.5 through 4.3.2. Some of them have two ASCI terminals connected. I have a shell script that is executed by a user on the main console... (2 Replies)
Discussion started by: andrei_r20
2 Replies

7. Infrastructure Monitoring

capture snmp packets in AIX

Hi, I want to capture snmp packets in AIX. When i give print from AIX6.1, Printer will give its response thru' snmp. I used iptrace command like below, but it is not capturing snmp packets other packets are captured like udp, tcp.. 1. iptrace command: /usr/sbin/iptrace -a -i en0... (1 Reply)
Discussion started by: meeraramanathan
1 Replies

8. AIX

AIX V4 SNMP MIBs

Hello! I'm not a expert AIX administrator, but i need to monitorize an AIX V4 system. I want to do it using SNMP but i don't really know how to get CPU, proccess or memory information. I only can get network interfaces information.... How can i add more MIBs to get more info about the AIX... (0 Replies)
Discussion started by: MikelCV
0 Replies

9. UNIX for Advanced & Expert Users

Monitoring CPU usage on AIX 5.3 with SNMP

Hi I would like to monitor CPU usage ( %) , memory utilization and such on an AIX 5.3 with snmp. How would I do that ? :confused: If I do "snmpwalk -c public -v1 hosttomonitor" I get nothing about the CPU. I've done this on Linux ( not much trouble doing it on linux ) but I'm having a hard... (2 Replies)
Discussion started by: art
2 Replies

10. UNIX for Advanced & Expert Users

Sending SNMP Traps in AIX / Unix

Hi, Just wondering if anyone knows how can I send an SNMP Trap in Unix Environment(AIX) to another machine (NT/Ux) after having activated the SNMP in the AIX. Can this be done by using a single command line or do I have to write a script for it? Thanks in advance for your advices. :) (1 Reply)
Discussion started by: goliath
1 Replies
Login or Register to Ask a Question