problem with snmpd.conf couldn't snmpwalk with the ip 118.107.242.20?

andrewhbk · 08-19-2009, 05:20 AM

this is my snmpd.conf

# sec.name source community
com2sec local localhost public
com2sec paranoid default public
com2sec mynetwork 118.107.242.0/28 public
#com2sec readonly default public
#com2sec readwrite default private

####
# Second, map the security names into group names:

# sec.model sec.name
group MyROSystem v1 local
group MyROSystem v2c local
group MyROSystem usm local
group MyROGroup v1 mynetwork
group MyROGroup v2c mynetwork
group MyROGroup usm mynetwork
group MyRWGroup v1 local
group MyRWGroup v2c local
group MyRWGroup usm local

####
# Third, create a view for us to let the groups have rights to:

# incl/excl subtree mask
view all included .1 80
view system included .iso.org.dod.internet.mgmt.mib-2.system

####
# Finally, grant the 2 groups access to the 1 view with different
# write permissions:

# context sec.model sec.level match read write notif
access MyROSystem "" any noauth exact system none none
access MyROGroup "" any noauth exact all none none
access MyRWGroup "" any noauth exact all all none

syslocation MainDatacenter
syscontact webmaster@debianhelp.co.uk

when i used snmpwalk -v 2c -c public 118.107.242.20 system it show timeout: no response
please help

centosboy · 08-19-2009, 05:27 AM

Quote:

Originally Posted by andrewhbk

this is my snmpd.conf

# sec.name source community
com2sec local localhost public
com2sec paranoid default public
com2sec mynetwork 118.107.242.0/28 public
#com2sec readonly default public
#com2sec readwrite default private

####
# Second, map the security names into group names:

# sec.model sec.name
group MyROSystem v1 local
group MyROSystem v2c local
group MyROSystem usm local
group MyROGroup v1 mynetwork
group MyROGroup v2c mynetwork
group MyROGroup usm mynetwork
group MyRWGroup v1 local
group MyRWGroup v2c local
group MyRWGroup usm local

####
# Third, create a view for us to let the groups have rights to:

# incl/excl subtree mask
view all included .1 80
view system included .iso.org.dod.internet.mgmt.mib-2.system

####
# Finally, grant the 2 groups access to the 1 view with different
# write permissions:

# context sec.model sec.level match read write notif
access MyROSystem "" any noauth exact system none none
access MyROGroup "" any noauth exact all none none
access MyRWGroup "" any noauth exact all all none

syslocation MainDatacenter
syscontact webmaster@debianhelp.co.uk

when i used snmpwalk -v 2c -c public 118.107.242.20 system it show timeout: no response
please help

can you ping the system from this box?

does the remote box have snmp port listening?

please indicate your troubleshooting steps so far

andrewhbk · 08-19-2009, 07:20 AM

yes i have install snmpd daemon on remote server too
and i can ping remote server
i only used snmpwalk check it, only localhost is working.

andrewhbk · 08-19-2009, 07:40 AM

sorry
forget to tell that i configure this because i used it for the mrtg.

evilted · 08-19-2009, 08:52 AM

dont know if this will help you, but i use this with mrtg, and i access it via the 10.10.0.0/16 net.

Code:

com2sec local     127.0.0.1/32    private
com2sec local     192.168.0.0/24   private
com2sec local     10.10.0.0/16   private

group MyROGroup v1         local
group MyROGroup v2c        local
group MyROGroup usm        local

view all    included  .1                               80

access MyROGroup ""      any       noauth    exact  all    none   none

syslocation location
syscontact admin@somewhere.com

andrewhbk · 08-19-2009, 11:48 AM

thanks evilted, i solved the issue

it's the "view system included .iso.org.dod.internet.mgmt.mib-2.system" cause the problem, i just remove this line then it worked.