cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1224
Views
0
Helpful
1
Replies

how to modify AR snmp.comf file in solaris 2.8

wangbing
Level 1
Level 1

i had read AR snmp config doc, but some content i can't understand.the doc said:

step2

#sec.name source community

com2sec local localhost private

com2sec mynetwork 10.1.9.0/24 public

when is modify this file to fit my network,the word com2sec need to chang? in which file I need to define 'mynetwork'.

step3

#sec.model sec.name

group MyRWGroup v1 local

group MyRWGroup v2c local

group MyRWGroup usm local

...

what is the meaning MyRWGroup, usm, in where I need to define?

Thank you!

1 Reply 1

gfullage
Cisco Employee
Cisco Employee

Sorry for the delay in responding.

The format of step 2 is as follows:

com2sec

So "com2sec" stays as is, this is the actual command that is parsed to the AR server. is just any arbirtrary name you come up with, this will be mapped to a group in the next step. is obvious. is the SNMP community name that you use on your network, this has to match the community that other hosts use in their SNMP queries to the AR server.

So, in your example you've configured two 's, one called local and one called mynetwork. You then map these to a group with the following command:

group

So you want something like the following:

group MyRWGroup v1 local

group MyRWGroup v2c local

group MyRWGroup usm local

group MyRWGroup v1 mynetwork

group MyRWGroup v2c mynetwork

group MyRWGroup usm mynetwork

v1, v2c and usm are standard variables for different SNMP versions that hosts may use to query the AR server. If you only want to accept SNMPv2 queries, then only put the "v2" entries in the config file.

Now finally the group permissions need to be defined. These are detailed in Step 5 on the doc you're referring to, so just copy those in.

What you'll end up with is that anyone on the 10.1.9.0/24 network will have read/write SNMP access to your AR server. If, for example, you want to add another subnet with only read access using SNMPv2 then you'd do something like the following:

com2sec ROnetwork 10.2.2.0/24 public

group MyROGroup v2c ROnetwork

Hope that helps.