snmptranslate:用于翻译OID,例如我们使用 snmptranslate -Td SNMPv2-MIB::system
可以知道system节点所使用的数字OID,反之亦然。snmptrap:可以向管理端发送trap包,主要用于报警,例如我们可以使用 sudo snmptrap -v 2c -c public localhost "cxy" .1.3.6.1.2.1.1 SNMPv2-MIB::sysContact.0 s 'test'
向管理端发送一个trap包,管理端即可直接查获并通知管理员,这就为被管理端提供了一种主动向管理端通讯的机制。另外,可以看到参数中多了一些内容,"cxy"是管理端的用户名,.1.3.6.1.2.1.1是主OID,而后面的则是具体的OID及其内容。snmptrapd:部署在管理端,可以通过修改/etc/snmp/snmptrapd.conf来配置其认证方式,一般使用命令 sudo snmptrapd -df -Lo
启动该服务,可以通过检查162端口确认其启动。
4.2. MIB-Browser
你可以在官网下载地址http://www.ireasoning.com/download.shtml
处获取该应用,由于是图形化界面,所以使用极为简单,下图是SNMP工具的主界面。
当然,你还可以在Tools中找到Trap Reciever与Trap Sender,其分别对应snmptrapd与snmptrap。
5. Q&A
获取信息时出现超时或被拒绝 你应该检查snmpd.conf文件的community是否和你命令的-c选项对应,或者是否监听端口是否对所有IP开放,但更多的时候是因为防火墙的原因,只要关掉就好了。 snmpset时出现无权限的问题 需要设置snmpd.conf文件中的rwcommunity。 snmptrap失败 查看snmptrapd.conf文件的配置。这里推荐大家关注公众号:网络技术干货圈,每天都会发布网络技术方面的文章。 OID查找不到的情况 需要下载snmp-mibs-downloader包,并且将/etc/snmp/snmp.conf中的第一行 mib:
注释掉。
6. configuration example
下面是我在Ubuntu16.04中的一些关于Net-SNMP的相关配置文件:
/etc/snmp/snmp.conf
# As the snmp packages come without MIB files due to license reasons, loading# of MIBs is disabled by default. If you added the MIBs you can reenable# loading them by commenting out the following line.#mibs :
/etc/snmp/snmpd.conf
## EXAMPLE-trap.conf:# An example configuration file for configuring the Net-SNMP snmptrapd agent.################################################################################## This file is intended to only be an example.# When the snmptrapd agent starts up, this is where it will look for it.## All lines beginning with a '#' are comments and are intended for you# to read. All other lines are configuration commands for the agent.## PLEASE: read the snmptrapd.conf(5) manual page as well!##authCommunity log,execute,net private authCommunity log,execute,net public### send mail when get any events#traphandle default /usr/bin/traptoemail -s smtp.qq.com 1484652026@qq.com### send mail when get linkDown#traphandle .1.3.6.1.6.3.1.1.5.3 /usr/bin/traptoemail -s smtp.example.org foobar@example.org
/etc/snmp/snmpd.conf
################################################################################# EXAMPLE.conf:# An example configuration file for configuring the Net-SNMP agent ('snmpd')# See the 'snmpd.conf(5)' man page for details## Some entries are deliberately commented out, and will need to be explicitly activated################################################################################## AGENT BEHAVIOUR## Listen for connections from the local system only#agentAddress udp:127.0.0.1:161# Listen for connections on all interfaces (both IPv4 *and* IPv6)#agentAddress udp:161,udp6:[::1]:161################################################################################# SNMPv3 AUTHENTICATION## Note that these particular settings don't actually belong here.# They should be copied to the file /var/lib/snmp/snmpd.conf# and the passwords changed, before being uncommented in that file *only*.# Then restart the agent# createUser authOnlyUser MD5 "remember to change this password"# createUser authPrivUser SHA "remember to change this one too" DES# createUser internalUser MD5 "this is only ever used internally, but still change the password"# If you also change the usernames (which might be sensible),# then remember to update the other occurances in this example config file to match.################################################################################# ACCESS CONTROL# # system + hrSystem groups only#view systemonly included .1.3.6.1.2.1.1#view systemonly included .1.3.6.1.2.1.25.1view systemonly included .1 # Full access from the local host#rocommunity public localhost # Default access to basic system info rwcommunity public default -V systemonly # rocommunity6 is for IPv6 rwcommunity6 public default -V systemonly # Full access from an example network # Adjust this network address to match your local
本文地址:百科问答频道 https://www.neebe.cn/wenda/942213_2.html,易企推百科一个免费的知识分享平台,本站部分文章来网络分享,本着互联网分享的精神,如有涉及到您的权益,请联系我们删除,谢谢!