SNMP
*******************************************************************************
Instalar e Configurar o SNMP
Criado por: Alessandro C. M. Kuramoto
Data: 16/07/2009
Modificado em: 01/08/2010-20:56
v.20100801-2056
Palavras-chaves: Debian, Gentoo, SNMP, net-snmp
keywords: Debian, Gentoo, SNMP, net-snmp
If you want to know something about this file, send an e-mail to me at the
sancmk@gmail.com or post a comment here (at the Word Press)
moshi kono fairu no koto wo shiteitakatara, boku ni email wo okutte kudasai,
matawa kono Word Press ni chuushaku mo shitte ii desu.
boku no email wa sancmk@gmail.com desu
Por favor, matenham o nome do autor deste arquivo.
*******************************************************************************
###############################################################################
# Servidor:
###############################################################################
SO: Debian
Servidor: SNMP
Serviço: SNMP
Instalação básica (modo texto).
RAM 256 MB
Swap 760 MB
/boot 100 MB
/ 3 GB
###############################################################################
# Conceitos:
###############################################################################
|##########^ Conceitos########################################################|
###############################################################################
# Dados:
###############################################################################
>Dados
Download: ~12 min (a taxa de Download ~156 Kbps)
Instalação: ~5 min
===============================================================================
Portas Utilizadas pelo SNMPD:
===============================================================================
### No servidor:
udp/snmp (udp/161)
|==========^ Portas Utilizadas pelo SNMPD ====================================|
|##########^ Dados ###########################################################|
###############################################################################
# Instalando:
###############################################################################
>> Instalando no Debian;
>> Instalando no Fedora;
>> Instalando no Gentoo;
>> Instalando no OpenSUSE;
|<<<<<< #### Instalando ####
===============================================================================
Instalando o SNMPD no Debian 5.0 (Lenny):
===============================================================================
>Debian 5:
(Download e instalação: ~17 min <depende da taxa de Download>)
## Instalando o SNMP Agent:
apt-get -y install snmpd
|<<<<<< #### Instalando #### ==== Instalando o SNMPD no Debian 5.0 (Lenny) ====
apt-get install snmp
|==========^ Instalando o SNMPD no Debian 5.0 (Lenny) ========================|
|<<<<<< #### Instalando ####
===============================================================================
Instalando o SNMPD no Fedora 10:
===============================================================================
>Fedora 10
yum install net-snmp
|<<<<<< #### Instalando #### ==== Instalando o SNMPD no Fedora 10 ====
yum install net-snmp-utils
|==========^ Instalando o SNMPD no Fedora 10 =================================|
|<<<<<< #### Instalando ####
===============================================================================
Instalando o SNMPD no Gentoo:
===============================================================================
>Gentoo
emerge -av net-snmp
|<<<<<< #### Instalando #### ==== Instalando o SNMPD no Gentoo ====
|==========^ Instalando o SNMPD no Gentoo ====================================|
|<<<<<< #### Instalando ####
===============================================================================
Instalando o SNMPD no OpenSUSE 11:
===============================================================================
>OpenSuse 11:
|<<<<<< #### Instalando #### ==== Instalando o SNMPD no OpenSUSE 11 ====
## Instalando o SNMP Agent:
yast2
Software > Software Management
## Procurar por:
net-snmp
|==========^ Instalando o SNMPD no OpenSUSE 11 ===============================|
|##########^ Instalando ######################################################|
############################################################################### # Configurando:
###############################################################################
>Configurando
>> Instalando no Debian;
>> Instalando no Fedora;
>> Instalando no Gentoo;
|<<<<<< #### Configurando ####
[No Servidor SNMPD (Agente)]
Exemplos de Configuração:
_______________________________________________________________________________
SO: Debian
Arquivo: /etc/default/snmpd (Permissões: -rw-r–r– 1 root root)
——————————————————————–
.
..
…
#[No Servidor SNMPD (Agente)]
(Fonte: https://answers.launchpad.net/ubuntu/+question/7765)
#>>>> Modificar:
### Modificar esta linha, trocar 127.0.0.1 para 0.0.0.0
#SNMPDOPTS=’-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1′
SNMPDOPTS=’-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid 0.0.0.0′
…
..
.
|———-^ Arquivo: /etc/default/snmpd ————————————-|
|<<<<<< #### Configurando ####
## Fazendo um backup do arquivo original:
cp /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.default
|<<<<<< #### Configurando ####
### Exemplos de Configuração:
_______________________________________________________________________________
SO: Debian
Arquivo: /etc/snmp/snmpd.conf (Permissões: -rw——- 1 root root)
——————————————————————–
.
..
…
#>>>> Para conhecimento (No Debian a alteração é feita no /etc/default/snmpd)
### Interfaces que o servidor vai executar
#agentaddress 10.10.10.1:161
#proxy -v 1 -c COMUNIDADE localhost:3401 .1.3.6.1.4.1.3495.1
.
..
…
# sec.name source community
#>>>> Modificado:
## Comente a linha:
#> com2sec paranoid default public
#com2sec paranoid default public
#>>>> Adicionado:
## Adicione as linhas:
#> com2sec local localhost lantest
#> com2sec localnet 10.10.10.0/24 lantest
## Altere o endereço 10.10.10.0/24 para o endereço da sua rede
com2sec local localhost lantest
com2sec localnet 10.10.10.0/24 lantest
#com2sec readonly default public
#com2sec readwrite default private
####
# Second, map the security names into group names:
# sec.model sec.name
#>>>> Modificado
## Comente
#group MyROSystem v1 paranoid
#group MyROSystem v2c paranoid
#group MyROSystem usm paranoid
#group MyROGroup v1 readonly
#group MyROGroup v2c readonly
#group MyROGroup usm readonly
group MyRWGroup v1 readwrite
group MyRWGroup v2c readwrite
group MyRWGroup usm readwrite
## Mudar para:
group MyROSystem v1 local
group MyROSystem v2c local
group MyROSystem usm local
group MyROGroup v1 localnet
group MyROGroup v2c localnet
group MyROGroup usm localnet
…
..
.
.
..
…
#>>>> Comentado:
#syslocation Unknown (configure /etc/snmp/snmpd.local.conf)
#>>>> Adicionado:
sysLocation BSB – Brasilia – EMPRESA (LANTEST)
#>>>> Comentado:
#syscontact Root <root@localhost> (configure /etc/snmp/snmpd.local.conf)
#>>>> Adicionado:
sysContact Suporte Tecnico <root@lantest.net.br>
#>>>> Adicionado:
### Esta é informação “hostname” mostrada no Cacti:
sysName proxy.dominio.com.br
#>>>> Adicionado:
### Esta informação é a descrição do sistema. Informação “System”
sysDescr Servidor de Proxy
…
..
.
…
..
.
|———-^ /etc/snmp/snmpd.conf ——————————————–|
|<<<<<< #### Configurando ####
### Salve o arquivo acima
|<<<<<< #### Configurando ####
———————————————-
### Reinicie o serviço do SNMPD:
/etc/init.d/snmpd restart
# Ou:
invoke-rc.d snmpd restart
|——————————————–|
===============================================================================
Configurando o SNMPD no Gentoo:
===============================================================================
### Copiar o arquivo de configuração:
cp /etc/snmp/snmpd.conf.example /etc/snmp/snmpd.conf
|<<<<<< #### Configurando #### ==== Configurando o SNMPD no Gentoo ====
vim /etc/snmp/snmpd.conf
_______________________________________________________________________________
SO: Gentoo
Arquivo: /etc/snmp/snmpd.conf (Permissões: -rw-r–r– 1 root root)
——————————————————————–
.
..
…
#>>>> Modificado:
# Linha comentada:
#com2sec mynetwork NETWORK/24 COMMUNITY
# Linha adicionada:
com2sec mynetwork 10.161.0.0/24 lantest
…
…
#|<<<<<< #### Configurando #### ==== Configurando o SNMPD no Gentoo ====
#>>>> Mantido:
group MyROGroup v1 mynetwork
group MyROGroup v2c mynetwork
group MyROGroup usm mynetwork
…
…
#>>>> Mantido:
# incl/excl subtree mask
view all included .1 80
…
…
#>>>> Mantido:
# context sec.model sec.level match read write notif
access MyROGroup “” any noauth exact all none none
access MyRWGroup “” any noauth exact all all none
…
…
#|<<<<<< #### Configurando #### ==== Configurando o SNMPD no Gentoo ====
#>>>> Modificado:
# Linha comentada:
#syslocation Right here, right now.
# Linha adicionada:
sysLocation BSB – Brasilia – EMPRESA (LANTEST)
#>>>> Modificado:
# Linha comentada:
#syscontact Me <me@somewhere.org>
# Linha adicionada:
sysContact Suporte Tecnico <root@lantest.net.br>
…
..
.
|———-^ /etc/snmp/snmpd.conf ——————————————–|
|<<<<<< #### Configurando #### ==== Configurando o SNMPD no Gentoo ====
#### Para iniciar o serviço do SNMPD:
/etc/init.d/snmpd start
|==========^ Configurando o SNMPD no Gentoo ==================================|
|##########^ Configurando ####################################################|
###############################################################################
# Gerência:
###############################################################################
===============================================================================
Testes
===============================================================================
## Para testar a conexão SNMP:
# -c – especifica a comunidade
# -v 1 – versão do SNMP
snmpwalk -Os -c public -v 1 127.0.0.1 system
snmpwalk -Os -c public -v 1 localhost interface
snmpwalk -sO -c lantest -v 2c 192.168.1.4 system
———————————————-
### Reiniciando o SNMPD:
/etc/init.d/snmpd restart
# Ou:
invoke-rc.d snmpd restart
|——————————————–|
|##########^ Gerência ########################################################|
###############################################################################
# Troubleshooting
###############################################################################
>Troubleshooting
|<<<<<<<<<<<<<< #### Troubleshooting ####
——————————————————————————-
### Erros conhecidos: (Known Errors)
## Questão/ Problema: (Question/Issue)
Ao executar o comando “snmpwalk” não é mostrado nenhum resultado.
|<<<<<<<<<<<<<< #### Troubleshooting ####
## Sintomas: (Symptom)
Ao executar o comando abaixo não é mostrado nenhum resultado.
———————————————————
snmpwalk -v 1 -c public localhost IP-MIB::ipAdEntIfIndex
———————————————————
## Causa: (Cause)
Este problema pode ter vários motivos.
Um problema detectado foi o mesmo nome dado para a Community public,
que já existia na configuração.
|<<<<<<<<<<<<<< #### Troubleshooting ####
## Solução: (Solution)
No CentOS algumas linhas foram comentadas quando estava configurando o
Cactic conforme o site:
http://www.cyberciti.biz/faq/fedora-rhel-install-cacti-monitoring-rrd-software/
Linhas comentadas no SNMPD do CentOS
—————————————————————–
Arquivo: /etc/snmp/snmpd.conf
#>>>> Linha Comentada:
#com2sec notConfigUser default public
…
…
#>>>> Linha Comentada:
#group notConfigGroup v1 notConfigUser
…
…
#>>>> Linha Comentada:
#group notConfigGroup v2c notConfigUser
…
…
#>>>> Linha Comentada:
#access notConfigGroup “” any noauth exact systemview none none
|—————————————————————|
|—————————————————————————–|
|##########^ Troubleshooting #################################################|
###############################################################################
# Referências:
###############################################################################
Quick HOWTO : Ch22 : Monitoring Server Performance:
http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch22_:_Monitoring_Server_Performance
SNMP Server (snmpd) and Client (snmp) Installation and Configuration in Debian:
http://www.debianhelp.co.uk/snmp.htm
SNMP binds only to 127.0.0.1 (localhost):
https://answers.launchpad.net/ubuntu/+question/7765
|##########^ Referências #####################################################|
###############################################################################
# Ver Equipamentos:
###############################################################################
3Com OfficeConnect VPN Firewall:
http://ixbtlabs.com/articles2/router-3com-3cr870-95/router-3com-3cr870-95.html
Ver:
CBQ, Shaper
iptraf
===============================================================================
*******************************************************************************
Instalar e Configurar o SNMP no Windows
Criado por: Alessandro C. M. Kuramoto
Data: 22/07/2009
Modificado em: 16/07/2009-20:56
v.20090716-2056
Palavras-chaves: SNMP
*******************************************************************************
###############################################################################
#
###############################################################################
http://support.microsoft.com/?scid=kb%3Ben-us%3B324263&x=7&y=11
iptables -I input_ext 7 -s 10.10.10.117 -d 0/0 -p udp –dport 161 -j ACCEPT
