I am planning to disable SNMP in our AIX LPARs. wanted to see by disabling in a test LPAR.
before that, I would like to check disabling this SNMP will impact any of our application or database in anyway. what kind of other software depends on these SNMP daemons ?
Can you please let me know the exact use of SNMP in AIX. I understand that SNMP is used to collect information about network connected servers/routes/devices etc. (will it affect NFS file systems ? )
ours is a small shop. we never used SNMP config files to setup anything specially.
when we installed AIX 71, SNMP v3 non-encrypted version came along with it. please see details below. we never had an opportunity use SNMP agents/server for any purpose.
Please let me know disabling SNMP related daemons or services will cause any issues. thank you.
Last edited by system.engineer; 04-13-2016 at 05:57 PM..
Hi,
Just wondering if anyone knows how can I send an SNMP Trap in Unix Environment(AIX) to another machine (NT/Ux) after having activated the SNMP in the AIX.
Can this be done by using a single command line or do I have to write a script for it?
Thanks in advance for your advices.
:) (1 Reply)
Hi
I would like to monitor CPU usage ( %) , memory utilization and such on an AIX 5.3 with snmp.
How would I do that ? :confused:
If I do "snmpwalk -c public -v1 hosttomonitor" I get nothing about the CPU.
I've done this on Linux ( not much trouble doing it on linux ) but I'm having a hard... (2 Replies)
Hello!
I'm not a expert AIX administrator, but i need to monitorize an AIX V4 system. I want to do it using SNMP but i don't really know how to get CPU, proccess or memory information. I only can get network interfaces information.... How can i add more MIBs to get more info about the AIX... (0 Replies)
Hi,
I want to capture snmp packets in AIX.
When i give print from AIX6.1, Printer will give its response thru' snmp.
I used iptrace command like below, but it is not capturing snmp packets other packets are captured like udp, tcp..
1. iptrace command:
/usr/sbin/iptrace -a -i en0... (1 Reply)
Hi, I tried to do some research on this subject, but got nothing conclusive.
I have the following need:
I have different servers with AIX versions 3.2.5 through 4.3.2.
Some of them have two ASCI terminals connected.
I have a shell script that is executed by a user on the main console... (2 Replies)
Hello everyone,
Can anyone help me please. I want to disable SSH direct access for an AIX user.
For example, if I have USER1 and USER2. I want to disactivate direct access for USER2. The user must enter his login (USER1) and his password and then he can do su - USER2 .
Thanks, (3 Replies)
Hello Admins,
We need to configure and setup snmp v2 on AIX 6.1 clients.
I don't find snmp v2 related files on AIX servers
. I see there is snmpdv3.conf and v3 installed.
Where can I get snmpdv2 for AIX?
Thanks in advance. (5 Replies)
Hello,
We're working on securing the AIX environment. started with disabling unused services on AIX.
Below are the entries which are not commented on my test LPAR (even other LPARs).
ntalk dgram udp wait root /usr/sbin/talkd talkd
daytime stream tcp nowait root... (1 Reply)
Hi,
We've a requirement to disable the protocols SSLv3, SSL v2 and TLS 1.0.
And have TLS 1.2 enabled using AEAD (Authentication Encryption with Associated Data).
This is the only information i have,
I'm not sure how to proceed, was trying to find information using google.
Can you... (6 Replies)
The company I work for has various AIX servers that I've recently migrated to AIX 7.1 (from 6.1). Some are powerHA clusters some are not. Likewise, the systems engineer that I replaced had net-snmp installed on said clustered systems. Long story short I am re-invoking AIX's native SNMP (v3) for... (1 Reply)
Discussion started by: davix
1 Replies
LEARN ABOUT MINIX
snmp_config
SNMP_CONFIG(5) Net-SNMP SNMP_CONFIG(5)NAME
snmp_config - handling of Net-SNMP configuration files
DESCRIPTION
The Net-SNMP package uses various configuration files to configure its applications. This manual page merely describes the overall nature
of them, so that the other manual pages don't have to.
DIRECTORIES SEARCHED
First off, there are numerous places that configuration files can be found and read from. By default, the applications look for configura-
tion files in the following 4 directories, in order: /etc/snmp, /usr/share/snmp, /usr/lib64/snmp, and $HOME/.snmp. In each of these direc-
tories, it looks for files with the extension of both conf and local.conf (reading the second ones last). In this manner, there are 8
default places a configuration file can exist for any given configuration file type.
Additionally, the above default search path can be overridden by setting the environment variable SNMPCONFPATH to a colon-separated list of
directories to search for. The path for the persistent data should be included when running applications that use persistent storage, such
as snmpd.
Applications will read persistent configuration files in the following order of preference:
file in SNMP_PERSISTENT_FILE environment variable
directories in SNMPCONFPATH environment variable
directory defined by persistentDir snmp.conf variable
directory in SNMP_PERSISTENT_DIR environment variable
default /var/lib/net-snmp directory
Finally, applications will write persistent configuration files in the following order of preference:
file in SNMP_PERSISTENT_FILE environment variable
directory defined by persistentDir snmp.conf variable
directory in SNMP_PERSISTENT_DIR environment variable
default /var/lib/net-snmp directory
Note: When using SNMP_PERSISTENT_FILE, the filename should match the application name. For example, /var/net-snmp/snmpd.conf.
CONFIGURATION FILE TYPES
Each application may use multiple configuration files, which will configure various different aspects of the application. For instance,
the SNMP agent (snmpd) knows how to understand configuration directives in both the snmpd.conf and the snmp.conf files. In fact, most
applications understand how to read the contents of the snmp.conf files. Note, however, that configuration directives understood in one
file may not be understood in another file. For further information, read the associated manual page with each configuration file type.
Also, most of the applications support a -H switch on the command line that will list the configuration files it will look for and the
directives in each one that it understands.
The snmp.conf configuration file is intended to be a application suite wide configuration file that supports directives that are useful for
controlling the fundamental nature of all of the SNMP applications, such as how they all manipulate and parse the textual SNMP MIB files.
SWITCHING CONFIGURATION TYPES IN MID-FILE
It's possible to switch in mid-file the configuration type that the parser is supposed to be reading. Since that sentence doesn't make
much sense, lets give you an example: say that you wanted to turn on packet dumping output for the agent by default, but you didn't want to
do that for the rest of the applications (ie, snmpget, snmpwalk, ...). Normally to enable packet dumping in the configuration file you'd
need to put a line like:
dumpPacket true
into the snmp.conf file. But, this would turn it on for all of the applications. So, instead, you can put the same line in the snmpd.conf
file so that it only applies to the snmpd daemon. However, you need to tell the parser to expect this line. You do this by putting a spe-
cial type specification token inside a [] set. In other words, inside your snmpd.conf file you could put the above snmp.conf directive by
adding a line like so:
[snmp] dumpPacket true
This tells the parser to parse the above line as if it were inside a snmp.conf file instead of an snmpd.conf file. If you want to parse a
bunch of lines rather than just one then you can make the context switch apply to the remainder of the file or until the next context
switch directive by putting the special token on a line by itself:
# make this file handle snmp.conf tokens:
[snmp]
dumpPacket true
logTimestamp true
# return to our original snmpd.conf tokens:
[snmpd]
rocommunity mypublic
COMMENTS
Any lines beginning with the character '#' in the configuration files are treated as a comment and are not parsed.
API INTERFACE
Information about writing C code that makes use of this system in either the agent's MIB modules or in applications can be found in the
read_config(3) manual page.
SEE ALSO snmpconf(1), read_config(3), snmp.conf(5), snmpd.conf(5)4th Berkeley Distribution 5 May 2005 SNMP_CONFIG(5)