I have /etc/snmp/snmpd.conf provided by default by the system. I got it when I
installed net-snmp utilities. You probabily know how it looks like.
I get what you are suggesting. But in that case I had to generate my own
snmpd.conf with snmpconf utility and use it to replace the default one provided
by the system /etc/snmp/snmpd.conf
I understand but I wanted to actually keep the default /etc/snmp/snmpd.conf
because it has much more information and options inside, so my intention was to
make it work just by editing default /etc/snmp/snmpd.conf that I got with
installation.
And luckily after bumping my head against the wall whole day yesterday, I
managed to figure out what I had to change in /etc/snmp/snmp.conf to allow
IP-MIB's to be readable. I just needed to add an extra line in the 'view'
section... Here it is if anyone else runs into a similar problem:
--------------------------------------------- excerpt from /etc/snmp/snmp.conf
####
# First, map the community name "public" into a "security name"
# sec.name source community
com2sec notConfigUser default public
####
# Second, map the security name into a group name:
# groupName securityModel securityName
group notConfigGroup v1 notConfigUser
group notConfigGroup v2c notConfigUser
####
# Third, create a view for us to let the group have rights to:
# Make at least snmpwalk -v 1 localhost -c public system fast again.
# name incl/excl subtree mask(optional)
view systemview included .1.3.6.1.2.1.1
view systemview included .1.3.6.1.2.1.25.1.1
#------------------ this was the line I had to add to allow IP-MIB's
view systemview included .1.3.6.1.2.1.4
####
# Finally, grant the group read-only access to the systemview view.
# group context sec.model sec.level prefix read write notif
access notConfigGroup "" any noauth exact systemview none none
And it solved it :))
Thanks a lot guys,
Dzenan
-----Original Message-----
From: dave.shi...@googlemail.com on behalf of Dave Shield
Sent: Wed 7/7/2010 10:09 AM
To: Dzenan Causevic
Cc: net-snmp-users@lists.sourceforge.net
Subject: Re: Unable to read IP-MIBs
On 7 July 2010 08:08, Dzenan Causevic <dzenan.cause...@bstelecom.ba> wrote:
> How do I configure the agent to allow me to access to
> IP-MIB::ipNetToMediaTable.... I guess I need to make some changes to
> snmpd.conf file to get other mib's readable as well such as IP-MIB in this
> case, but I just cant' get it.
Given that you've said nothing about what your snmpd.conf file looks like,
it's a bit difficult to know what needs changing.
The simplest approach would be to replace the snmpd.conf file with one
containing the single line
rocommunity public
and restart the agent.
See the FAQ, and snmpd.conf(5) man page for more information about
configuring access control.
Dave
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
