{"id":29087,"date":"2022-03-24T03:48:36","date_gmt":"2022-03-24T03:48:36","guid":{"rendered":"https:\/\/www.devopsschool.com\/blog\/?p=29087"},"modified":"2022-12-23T06:20:20","modified_gmt":"2022-12-23T06:20:20","slug":"how-to-install-and-configure-snmp-agent","status":"publish","type":"post","link":"https:\/\/www.devopsschool.com\/blog\/how-to-install-and-configure-snmp-agent\/","title":{"rendered":"How to install and configure snmp agent"},"content":{"rendered":"\n

How to install and configure snmp agent service in Ubuntu?<\/h3>\n\n\n\n
\"\"<\/figure>\n\n\n\n

SNMP Manager Server<\/h4>\n\n\n\n
\n\n\n
$ sudo apt update\r\n$ sudo apt install snmp snmp-mibs-downloader<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
SNMP Agent Server<\/h4>\n\n\n\n
\n\n\n
$ sudo apt update\r\n$ sudo apt install snmpd<\/code><\/span><\/pre>\n\n\n
\n\n\n\n
Configuring the SNMP Manager Server<\/h4>\n\n\n\n
\n\n\n
$ vi \/etc\/snmp\/snmp.conf\r\n\r\nIn this file, there are a few comments and<\/span> a single un-commented line. To allow the manager to import the MIB files, comment out the mibs : line:\r\n\r\n\/etc\/snmp\/snmp.conf\r\n# As the snmp packages come without MIB files due to license reasons, loading<\/span>\r\n# of MIBs is disabled by default. If you added the MIBs you can reenable<\/span>\r\n# loading them by commenting out the following line.<\/span>\r\n#mibs :<\/span>\r\n\r\nSave and<\/span> close snmp.conf by pressing CTRL+X, followed by Y, and<\/span> then ENTER if<\/span> you\u2019re using nano. You are now finished configuring the manager server, but you will still need to use<\/span> this<\/span> server<\/span> to<\/span> help<\/span> configure<\/span> your<\/span> agent<\/span> server<\/span>.<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
Configuring the SNMP Agent Server<\/h4>\n\n\n\n
\n\n\n
$ \/etc\/snmp\/snmpd.conf\r\n\r\nInside, you will have to make a few changes. These will mainly be used to bootstrap your configuration so that you can manage it from your other server.\r\n\r\nFirst, you need to change the agentAddress directive. Currently, it is set to only allow connections originating from the local computer. You\u2019ll need to comment out the current line, and<\/span> uncomment the line underneath, which allows all connections.\r\n\r\n#  Listen for connections from the local system only<\/span>\r\n#agentAddress  udp:127.0.0.1:161<\/span>\r\n#  Listen for connections on all interfaces (both IPv4 *and* IPv6)<\/span>\r\nagentAddress udp:161<\/span>,udp6:[::1<\/span>]:161<\/span>\r\n\r\nThe user you are creating will be called bootstrap and<\/span> will be used as<\/span> a template in which to create your first actual user. The SNMP packages do<\/span> this through a process of cloning the user\u2019s properties.\r\n\r\ncreateUser bootstrap MD5 temp_password DES\r\n\r\nNow that you have a new<\/span> user specified, you can set up the level of access that this user will have. In this tutorial you will set this up for<\/span> your bootstrap user, and<\/span> also for<\/span> the new<\/span> user you will be creating, called demo.\r\n\r\nrwuser bootstrap priv\r\nrwuser demo priv\r\n\r\nWhen you are finished making these changes, save and<\/span> close the file.\r\n\r\nTo implement these changes, restart the snmpd service on your agent server:\r\n\r\nsudo systemctl restart snmpd\r\n\r\nThe SNMP daemon will listen for<\/span> connections on port :161.<\/span> Configure UFW to allow connections from the manager server to this port:\r\n\r\nsudo ufw allow from manager_server_ip_address to any port 161<\/span><\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n
Verifying Authentication to the Agent Server<\/h4>\n\n\n\n
In this step, you will test to make sure you can connect with your bootstrap<\/strong> account to the agent server<\/strong>. Before that, however, this tutorial will talk a bit about the general structure of sending an SNMP command.<\/p>\n\n\n\n
When using the suite of tools included in the snmp<\/code> package (the net-snmp<\/code> software suite), there are a few patterns in the way you must call the commands. The first thing to do is authenticate with the SNMP daemon that you wish to communicate with. This usually involves supplying a few pieces of information. The common ones are as follows:<\/p>\n\n\n\n
  • -v<\/code>: This flag is used to specify the version of the SNMP protocol that you would like to use. This tutorial will be using v3.<\/li>
  • -c<\/code>: This flag is used if you are using SNMP v1 or v2-style community strings for authentication. Since you are using v3-style user-based authentication, you don\u2019t need to do this.<\/li>
  • -u<\/code>: This parameter is used to specify the username that you wish to authenticate as. To read or modify anything using SNMP, you must authenticate with a known username.<\/li>
  • -l<\/code>: This is used to specify the security level that you are connecting with. The possible values are\u00a0noAuthNoPriv<\/code>\u00a0for no authentication and no encryption,\u00a0authNoPriv<\/code>\u00a0for authentication but no encryption, and\u00a0authPriv<\/code>\u00a0for authentication and encryption. The username that you are using must be configured to operate at the security level you specify, or else the authentication will not succeed.<\/li>
  • -a<\/code>: This parameter is used to specify the\u00a0authentication protocol<\/em>\u00a0that is used. The possible values are\u00a0MD5<\/code>\u00a0or\u00a0SHA<\/code>. This must match the information that was specified when the user was created.<\/li>
  • -x<\/code>: This parameter is used to specify the\u00a0encryption protocol<\/em>\u00a0that is used. The possible values are\u00a0DES<\/code>\u00a0or\u00a0AES<\/code>. This must match the information that was specified when the user was created. This is necessary whenever the user\u2019s privilege specification has\u00a0priv<\/code>\u00a0after it, making encryption mandatory.<\/li>
  • -A<\/code>: This is used to give the authentication passphrase that was specified when the user was created.<\/li>
  • -X<\/code>: This is the encryption passphrase that was specified when the user was created. If none was specified but an encryption algorithm was given, the authentication passphrase will be used. This is required when the\u00a0-x<\/code>\u00a0parameter is given or whenever a user\u2019s privilege specification has a\u00a0priv<\/code>\u00a0after it, requiring encryption.<\/li><\/ul>\n\n\n\n
    \n\n\n
    Using this information, you can construct your commands. Given how you set up your bootstrap user, the commands you will be using with that account will look like this:\r\n\r\n$ snmp_command -u bootstrap -l authPriv -a MD5 -x DES -A temp_password -X temp_password remote_host snmp_sub_command_or_options\r\n\r\nFrom your manager server, test to make sure your bootstrap account is available. Type the following to display the system information for<\/span> the agent server:\r\n\r\n$ snmpget -u bootstrap -l authPriv -a MD5 -x DES -A temp_password -X temp_password agent_server_ip_address 1.3<\/span>.6<\/span>.1<\/span>.2<\/span>.1<\/span>.1<\/span>.1<\/span>.0<\/span>\r\n\r\nThe 1.3<\/span>.6<\/span>.1<\/span>.2<\/span>.1<\/span>.1<\/span>.1<\/span>.0<\/span> string is the OID that is responsible for<\/span> displaying system information. It will return<\/span> the output of uname -a on the remote system.\r\n\r\nThis will give the following output:\r\n\r\nOutput\r\nSNMPv2-MIB::sysDescr.0<\/span> = STRING: Linux agent 4.15<\/span>.0<\/span>-66<\/span>-generic #75-Ubuntu SMP Tue Oct 1 05:24:09 UTC 2019 x86_64<\/span>\r\nNow that you have verified that you can authenticate to the server running the SNMP daemon, you can continue<\/span> on to create your regular user account.<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
    \n\n\n\n
    How to install and configure snmp agent service in Centos\/RHEL?<\/h3>\n\n\n\n
    How to install and configure snmp agent service in Windows?<\/h3>\n","protected":false},"excerpt":{"rendered":"
    How to install and configure snmp agent service in Ubuntu? SNMP Manager Server SNMP Agent Server Configuring the SNMP Manager Server Configuring the SNMP Agent Server Verifying Authentication to the… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[2],"tags":[],"class_list":["post-29087","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/29087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=29087"}],"version-history":[{"count":3,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/29087\/revisions"}],"predecessor-version":[{"id":29092,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/29087\/revisions\/29092"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=29087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=29087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=29087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}