Please login or register. May 21, 2018, 08:56:27 AM

Author Topic: is there way to tune AIX snmpd to generate arbitrary traps  (Read 6376 times)

0 Members and 1 Guest are viewing this topic.

h0liday

  • New Member
  • *
  • Posts: 3
  • Karma: +0/-0
Hello.

Is there way to tune standard snmpdv3 daemon in AIX 6.1 to send traps on system events, just as it is implemented in a net-snmp.
Unfortunately neither the documentation nor the internet I could not to find definite answer.
The only thing that I realized there is several standard events (coldStart, warmStart, etc) on which traps generated.
But it is unclear what can I  do in case when  I need to keep track of value of arbitrary OID ( hrProcessorLoad for example)

Michael

  • Administrator
  • Hero Member
  • *****
  • Posts: 1075
  • Karma: +0/-0
Re: is there way to tune AIX snmpd to generate arbitrary traps
« Reply #1 on: May 13, 2013, 05:32:27 PM »
The snmpd daemon can send traps. For items not in the standard MIB-2 and/or standard traps normally a smux addition is used.
I do not know net-snmp (will google in a moment) so I cannot say how AIX is (dis)similiar, but I know AIX snmp does send traps.

Note: my experience is mainly on snmpv1 and snmpv2 - so a bit of research is needed. (For snmpv1 the file /etc/snmpd.conf explains 'trap' very well.

It looks as if 'trap' is renamed 'notify' in snmpv3. As a starting point for further research look at the files in /usr/samples/snmpdv3.

Hope this helps!

h0liday

  • New Member
  • *
  • Posts: 3
  • Karma: +0/-0
Re: is there way to tune AIX snmpd to generate arbitrary traps
« Reply #2 on: May 16, 2013, 04:15:26 AM »
The snmpd daemon can send traps.
Certainly. Not only "can", but obliged inherently )))

Seems I found a way how to set desired thresholds values/send traps. Not exactly what I looked for, but close enough. Most parameters which I would like to track is controlled  via aixmibd subagent. After some minor changes of the files aixmibd.conf and snmpdv3.conf I was able to obtain alerts on the monitoring server side.

Michael

  • Administrator
  • Hero Member
  • *****
  • Posts: 1075
  • Karma: +0/-0
Re: is there way to tune AIX snmpd to generate arbitrary traps
« Reply #3 on: May 16, 2013, 07:42:00 AM »
would be wonderful if you provided some extra details about how you got this working - without divulging any security sensitive information of course!

Will certainly help me better understand the new world of snmpv3!  :D

h0liday

  • New Member
  • *
  • Posts: 3
  • Karma: +0/-0
Re: is there way to tune AIX snmpd to generate arbitrary traps
« Reply #4 on: May 17, 2013, 02:55:59 AM »
Well, firstly I should say that I did not plan to use exactly version 3.
I just wanted to be able to set some custom values ​​for the threshold values of some parameters for monitoring.
Therefore, the solution that was found does not use SNMP v3 in its pure form, just usage of compatibility with v1 and v2c which was provided in v3.
The entire setup procedure described here:
http://pic.dhe.ibm.com/infocenter/aix/v6r1/index.jsp?topic=%2Fcom.ibm.aix.commadmn%2Fdoc%2Fcommadmndita%2Fsnmpv1_daemon_config.htm

my snmpdv3.conf
Quote
VACM_GROUP group1 SNMPv1   private -
VACM_GROUP group2 SNMPv2c  public  -
VACM_GROUP group3 SNMPv2c  aixmib  -

COMMUNITY private   private    noAuthNoPriv     127.0.0.1       255.255.255.255 -
COMMUNITY public    public     noAuthNoPriv     10.100.100.1    255.255.255.255 -
COMMUNITY aixmib    aixmib     noAuthNoPriv     10.100.100.1    255.255.255.255 -

VACM_VIEW group1View        internet                    - included   -
VACM_VIEW group2View        internet                    - included   -
VACM_VIEW group3View        1.3.6.1.4.1.2.6.191         - included   -

VACM_ACCESS group1 - - noAuthNoPriv SNMPv1   group1View group1View group1View   -
VACM_ACCESS group2 - - noAuthNoPriv SNMPv2c  group2View  -         group2View   -
VACM_ACCESS group3 - - noAuthNoPriv SNMPv2c  group3View group3View group3View   -

NOTIFY notify1 traptag trap -
TARGET_ADDRESS  Target1 UDP 127.0.0.1    traptag trapparms1 - - -
TARGET_ADDRESS  Target2 UDP 10.100.100.1 traptag trapparms2 - - -
TARGET_PARAMETERS trapparms1 SNMPv2c  SNMPv2c  public  noAuthNoPriv -
TARGET_PARAMETERS trapparms2 SNMPv2c  SNMPv2c  public  noAuthNoPriv -

DEFAULT_SECURITY no-access - -

logging         file=/usr/tmp/snmpdv3.log       enabled
logging         size=100000                     level=3

smux    1.3.6.1.4.1.2.3.1.2.1.2         gated_password    # gated
smux    1.3.6.1.4.1.2.3.1.2.1.5         clsmuxpd_password # HACMP/ES for AIX clsmuxpd
smux    1.3.6.1.4.1.2.3.1.2.3.1.1       muxatmd_password  # muxatmd


and in the file aixmibd.conf I set the desired values ​​of certain parameters.
(agentAccess=1, pollInterval=5, etc)

That's all.
« Last Edit: May 17, 2013, 03:06:24 AM by h0liday »

Michael

  • Administrator
  • Hero Member
  • *****
  • Posts: 1075
  • Karma: +0/-0
Re: is there way to tune AIX snmpd to generate arbitrary traps
« Reply #5 on: May 17, 2013, 06:17:16 AM »
Thanks! Looks like I have homework  ;)