EndRun Meridian II, Руководство пользователя

Страница: 91 / 240

M e r i d i a n I I U s e r M a n u a l 70
C H A P T E R S I X
71 M e r i d i a n I I U s e r M a n u a l
S I M P L E N E T W O R K M A N A G E M E N T P R O T O C O L ( S N M P )
Meridian2 to be created who may be authenticated using the Secure Hash Algorithm (SHA) with
password
Meridian2_0
. Passwords and passphrases must have a
minimum
of 8 characters, or you
will not be able to be authenticated.
IMPORTANT
You must kill the
snmpd
daemon prior to editing,
/boot/net-snmp/snmpd.conf
. Otherwise, the secret
key creation may not complete properly. Issue the command
/etc/rc.d/rc.snmpd stop
to kill
the
snmpd
daemon. You can verify that the
snmpd
daemon has been killed by issuing the
ps -e
command and verifying that it is not present.
After rebooting, the agent will read the /boot/net-snmp/snmpd.conf configuration file and compute
secret key(s) for each of the users and delete the
createUser
lines from the file. It will then write
the secret key(s) to the file. These lines begin with the string,
usmUser
. In this way, un-encrypted
passwords are not stored on the system.
IMPORTANT
To generate new keys, stop the
snmpd
process, delete the existing
usmUser
key lines from the file
/boot/net-snmp/snmpd.conf and then add new
createUser
lines. Then reboot the system.
This example gives the simplest configuration to begin using SNMPv3 but doesn’t make use of the
full capabilities of the VACM in defining groups and views for fine-grained access control. The fac-
tory default /etc/snmpd.conf file contains commented blocks of lines that can be uncommented to give
you a basic configuration that uses the User-based Security Model (USM) described in RFC-2274 and
the View-based Access Control Model (VACM) described in RFC-2275. The comments included in
the file should help you in modifying it for your specific requirements.
Disable or
Restrict Access
To disable SNMP, see Chapter 5 - Security, Disable SNMP, SSH and HTTPS . To restrict access to
specific hosts see
Chapter 5 - Security, Restrict Access - Telnet, SSH and SNMP
.