So, I need some snmpd.conf help.

[fly]

So I failed at understanding how to configure my snmpd.conf file, even with the snmpconf Q&A. Instead I used the simple config mentioned in the FAQ.

Code: Select all

# contact
syslocation Something
syscontact "root@someone.com"

# auth
rocommunity public

# disk monitoring
disk /

Are there any security risks or any other issues with configuring snmpd in this way? Im using CentOS, if it matters.

[Linegod]

Well, picking 'public' is not a good idea...

And, IIRC, the latest net-snmp should be configured, at a minimum with:

Code: Select all

# define RO community
rocommunity     public

# First, map the community name "public" into a "security name"
#       sec.name  source          community
com2sec notConfigUser  default       public

# Second, map the security name into a group name:
#       groupName      securityModel securityName
group   notConfigGroup v1           notConfigUser
group   notConfigGroup v2c           notConfigUser

# Third, create a view for us to let the group have rights to:
#       name           incl/excl     subtree         mask(optional)
view    systemview     included      system

# Finally, grant the group read-only access to the systemview view.
#       group          context sec.model sec.level prefix read   write  notif
access  notConfigGroup ""      any       noauth    exact  systemview none none

With the above config, change the two instances of 'public' to your own communitystring.

Optionally, you can add:

Code: Select all

sysdescr        "Linux 2.6.17-5mdv"
syscontact      me@here.com
sysname         mybox
syslocation     Right Here

disk /
disk /tmp
disk /var
etc, etc

[fmangeant]

So I failed at understanding how to configure my snmpd.conf file, even with the snmpconf Q&A. Instead I used the simple config mentioned in the FAQ.

Hi

see the howto in my signature for a complete documentation about snmpd.conf