Configuration des pré-requis Linux. Référence : Version N : 1 Créé le : 9 Janvier Créé par : Thibault Cuisy Téléphone :

Transcription

1 Référence : Version N : 1 Créé le : 9 Janvier 2011 Créé par : Thibault Cuisy Téléphone :

2 Sommaire 1. Objectif Debian, Ubuntu Installation de SNMP Configuration Red Hat Entreprise Enabling SNMP access and trap forwarding for Red Hat Enterprise versions 3 and Confidentiel Coservit Page 2

3 1. Objectif Décrire la configuration SNMP sur un équipement. Confidentiel Coservit Page 3

4 2. Debian, Ubuntu 2.1. Installation de SNMP # apt-get install snmp snmpd 2.2. Configuration Editer le fichier de configuration SNMP : root@localhost # nano /etc/snmp/snmpd.conf Il faut autoriser l'accès en lecture des données SNMP. Par défaut, la ligne est décommentée. Entre la partie "First," et "Second" du fichier de configuration, commenter la ligne "com2sec paranoid default public" en rajoutant un "#" puis supprimer le "#" de la ligne "com2sec readonly default public". ####################################################### ######################## # Access Control ####################################################### ######################## # YOU SHOULD CHANGE THE "COMMUNITY" TOKEN BELOW TO A NEW KEYWORD ONLY # KNOWN AT YOUR SITE. YOU *MUST* CHANGE THE NETWORK TOKEN BELOW TO # SOMETHING REFLECTING YOUR LOCAL NETWORK ADDRESS SPACE. # By far, the most common question I get about the agent is "why won't # it work?", when really it should be "how do I configure the agent to # allow me to access it?" # # By default, the agent responds to the "public" community for read # only access, if run out of the box without any configuration file in # place. The following examples show you other ways of configuring # the agent so that you can change the community names, and give # yourself write access as well. # # The following lines change the access permissions of the agent so # that the COMMUNITY string provides read-only access to your entire # NETWORK (EG: /24), and read/write access to only the # localhost ( , not its real ipaddress). Confidentiel Coservit Page 4

5 # # For more information, read the FAQ as well as the snmpd.conf(5) # manual page. #### # First, map the community name (COMMUNITY) into a security name # (local and mynetwork, depending on where the request is coming # from): # sec.name source community #com2sec paranoid default public com2sec readonly <IP BOITIER> <COMMUNAUTE> #com2sec readwrite default private #### # Second, map the security names into group names: # sec.model sec.name group MyROSystem v1 paranoid group MyROSystem v2c paranoid group MyROSystem usm paranoid group MyROGroup v1 readonly group MyROGroup v2c readonly group MyROGroup usm readonly group MyRWGroup v1 readwrite group MyRWGroup v2c readwrite group MyRWGroup usm readwrite #### # Third, create a view for us to let the groups have rights to: # incl/excl subtree mask view all included.1 80 view system included.iso.org.dod.internet.mgmt.mib-2.system #### # Finally, grant the 2 groups access to the 1 view with different # write permissions: # context sec.model sec.level match read write notif #access MyROSystem "" any noauth exact system none none access MyROGroup "" any noauth exact all none none #access MyRWGroup "" any noauth exact all all none # Enregistrer le fichier de configuration. Confidentiel Coservit Page 5

6 Ensuite éditez le fichier /etc/default/snmpd : SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid ' et remplacez par l'adresse IP de l'interface réseau utilisée pour communiquer avec la machine B. Pour ne pas faire de filtrage à ce niveau il suffit d enlever l adresse IP. Enregistrer le fichier de configuration puis relancer le service : root@localhost # /etc/init.d/snmpd restart Confidentiel Coservit Page 6

7 3. Red Hat Entreprise 3.1. Enabling SNMP access and trap forwarding for Red Hat Enterprise versions 3 and 4 The OpenIPMI driver supported on Red Hat Enterprise versions 3 and 4 has a dependency on the version of Net-SNMP that is included with those distributions. IBM Director Core Services requires a different Net-SNMP version, Installation of Net-SNMP without removing the existing Net-SNMP version is required for IBM Director SNMP access and trap forwarding without compromising OpenIPMI services. Complete the following steps to enable SNMP access and trap forwarding for managed systems running Red Hat Enterprise versions 3 and 4: 1. Download the net-snmp tar.gz file from the Net-SNMP Web site at 2. Build and install the Net-SNMP libraries using the following steps. Notes: This procedure does not perform a full installation of Net-SNMP, but installs only the Net-SNMP libraries, which are required for IBM Director Core Services SNMP functions. Refer to the INSTALL and README files included in the net-snmp tar.gz package for additional installation information. Untar the source files. Type the following command and press Enter. tar -xvzf net-snmp tar.gz Change to the source directory. Type the following command and press Enter. cd net-snmp Build the Net-SNMP libraries with default options. Type the following commands (press Enter after each)../configure --with-defaults make Confidentiel Coservit Page 7

8 Install the Net-SNMP libraries only to /usr/local/lib. Type the following command and press Enter. make installlibs To enable trap forwarding, edit the /etc/init.d/dacimlist file and uncomment the following two lines two lines in the SNMP End Consumer section. LD_LIBRARY_PATH=/usr/local/lib export LD_LIBRARY_PATH Note: The configuration changes will not take effect until you restart the cimlistener daemon in step 7. To enable SNMP access, edit the /etc/init.d/dasnmp file and uncomment the following two lines in the section regarding the location of the net-snmp libraries. LD_LIBRARY_PATH=/usr/local/lib export LD_LIBRARY_PATH Configure the SNMP daemon that ships with Red Hat Enterprise to support AgentX agents. For details, see the documentation on the Net-SNMP Web Site. Create the file /usr/local/share/snmp/snmpd.conf to specify trapsink and trapcommunity settings. You might have to create the directory. This file should contain only settings for trapcommunity and trapsink. Specify a trap community value by adding a line containing the word trapcommunity followed by a space and the trapcommunity value, as in the following example. trapcommunity public Specify a trapsink value for each destination to which IBM Director will send SNMP traps. Add a line containing the word trapsink followed by a space and the trapsink value, as in the following example. trapsink Restart the cimlistener daemon by typing the following commands and pressing Enter after each: /etc/init.d/dacimlist stop Confidentiel Coservit Page 8

9 /etc/init.d/dacimlist start Restart the IBM Director AgentX subagent by typing the following commands and pressing Enter after each: /etc/init.d/dasnmp stop /etc/init.d/dasnmp start Confidentiel Coservit Page 9

10 Siège social Agence Grenoble 13 rue des Trembles Grenoble Tel : +33 (0) Agence Paris 20 rue du docteur Georges Lafosse Vanves Tel : +33 (0) Copyright 2009 Coservit. Tous droits réservés