Configuring SNMP Settings

To enable SNMP requests, perform one of the following actions:

• Enable SNMP requests from the Preferences page:
  • Add an SNMPv3 user who can enable SNMPv3 requests and who has read-only access to the full MIB in the everRun system.
  • Configure access control for SNMPv1 and SNMPv2 requests, where you allow no users (Restricted) or any user using the default public community (Unrestricted) to send requests.
• Customize SNMP request functionality by editing snmpd.conf files. You can customize access control for SNMPv1 requests and SNMPv2 requests. You can also customize the list of users for SNMPv3 requests. For information, see To customize SNMP request functionality (below).

To enable SNMP requests from the Preferences Page

1. Click Preferences in the left-hand navigation panel, to open the Preference page.
2. Under Notification, click SNMP Configuration.

3. Activate the check box next to Enable SNMP Requests.

4. The List of Users for SNMP Requests (Version 3) appears.

   If a username appears below the List of Users for SNMP Requests (Version 3), the user's security level is displayed and a read-only display of the snmpd.conf file also appears. The user has read-only access to the full MIB. Note that the system supports only one SNMP Requests (Version 3) user.

   If a username does not appear, you can add an SNMPv3 user.

   To add an SNMPv3 user

   1. Click the  Add button, which opens the Add a User wizard.

   2. Enter values for the following:

      Username—The name of a user who has access to the SNMPv3 agent. The name must be unique.

      Security Level—The user's security level. Valid values are:

      • No Authentication and No Privacy: No security is applied to messages; messages are not authenticated or encrypted.
      • Authentication and No Privacy: Messages are authenticated, but not encrypted. You must enter values for Authentication Type and Authentication Password.
      • Authentication and Privacy: Messages are authenticated and encrypted. You must enter values for Authentication Type, Authentication Password, Encryption Type, and Encryption Password.

      When the security level includes authentication or privacy, the following fields appear:

      Authentication Type—The user's type of authentication. Valid values are:

      • MD5: Configure the message digest algorithm (MD5) as the user's authentication type.
      • SHA: Configure the secure hash algorithm (SHA) as the user's authentication type.

      Authentication Password—The user's required password, which is used to generate the secret authentication key. The password must be a minimum of eight characters.

      Encryption Type—The user's type of encryption. Valid values are:

      • AES: Configure the Advanced Encryption Standard (AES) as the user's encryption type.
      • DES: Configure the data encryption standard (DES) as the user's encryption type.

      Encryption Password—The user's required password, which is used to generate the secret encryption key. The password must be a minimum of eight characters.

   3. Click Save to save the changes.

5. Select an access option:

   Restricted (the default)—Allows no users to send SNMPv1 requests and SNMPv2 requests.

   Unrestricted—Allows any user using the default public community to send SNMPv1 requests and SNMPv2 requests.

   Customized (available when snmpd.conf has been manually edited by a user; see To customize SNMP request functionality, below)—Allows customized access.

6. Click Save. (Or click Reset to restore the previously-saved values.)

To customize SNMP request functionality by editing snmpd.conf files

Customize SNMP request functionality by editing snmpd.conf files.

Customize access control for SNMPv1 requests and SNMPv2 requests by editing the /etc/snmp/snmpd.conf file:

1. Log in to the host.
2. Manually edit the standard /etc/snmp/snmpd.conf file on both nodes.
3. Save the file.
4. Restart the snmpd process on each node by entering the command systemctl restart snmpd.

Customize the list of users for SNMPv3 requests by editing the /etc/snmp/snmpd.conf and /var/lib/net-snmp/snmpd.conf files.

1. Log into the host.
2. Manually edit the standard /etc/snmp/snmpd.conf file on both nodes.
3. Manually edit the standard /var/lib/net-snmp/snmp/snmpd.conf file on both nodes.
4. Save the file.
5. Restart the snmpd process on each node by entering the command systemctl restart snmpd.

1. Click Preferences in the left-hand navigation panel, to open the Preference page.
2. Under Notification, click SNMP Configuration.
3. Activate the check box next to Enable SNMP Traps.
4. Type the name of the SNMP Community, or keep the default (public).

5. Below the List of Recipients of SNMP Traps (Version 3) is a list of the trap users, and the IP address of the recipient server where the trap user exists. The everRun system sends SNMPv3 traps to the trap user on the recipient server. Add a recipient, if necessary.

   To add a recipient

   1. Click the  Add button, which opens the Add a Recipient wizard.

   2. Enter values for the following:

      Recipient Address—The host name or the IPv4 address of the recipient server.

      Username—The name of a trap user on the recipient server. The name must be unique for the recipient.

      Security Level—The user's security level. Valid values are:

      • No Authentication and No Privacy: No security is applied to messages; messages are not authenticated or encrypted.
      • Authentication and No Privacy: Messages are authenticated, but not encrypted. You must enter values for Authentication Type and Authentication Password.
      • Authentication and Privacy: Messages are authenticated and encrypted. You must enter values for Authentication Type, Authentication Password, Encryption Type, and Encryption Password.

      When the security level includes authentication or privacy, the following fields appear:

      Authentication Type—The user's type of authentication. Valid values are:

      • MD5: Configure the message digest algorithm (MD5) as the user's authentication type.
      • SHA: Configure the secure hash algorithm (SHA) as the user's authentication type.

      Authentication Password—The user's required password, which is used to generate the secret authentication key. The password must be a minimum of eight characters.

      Encryption Type—The user's type of encryption. Valid values are:

      • AES: Configure the Advanced Encryption Standard (AES) as the user's encryption type.
      • DES: Configure the data encryption standard (DES) as the user's encryption type.

      Encryption Password—The user's required password, which is used to generate the secret encryption key. The password must be a minimum of eight characters.

   3. Click Save to save the changes.

6. Click Save. (Or click Reset to restore the previously saved values.)

7. Configure your organization's firewall to allow SNMP operations, which enables SNMP management systems to receive alerts from and send traps to the everRun system. To do so, configure your organization's firewall to open the SNMP port:

   Message Type: SNMP
   Protocol: SNMP
   Port: 161 (Get/Walk) 162 (Traps)

8. Generate a test alert by clicking Generate Test Alert.

   The everRun software generates a test alert and SNMP sends traps to recipients of SNMP traps; e-Alerts send a sample email with the subject "Test Alert" to all email recipients of e-Alerts, if configured (see Configuring e-Alerts); and Support Configuration sends a notification to your authorized Stratus service representative, if configured (see Configuring Remote Support Settings). Watch the Alerts History log (see The Alerts History Page) for delivery status.