SNMP AGENT
IMPORTANT
To keep up to date with the recommendations in RFC2578, and to resolve a compatibility issue with some monitoring applications, all SNMP tables in which the first index was set to 0 have been duplicated to new tables in which the first index is set to 1.
These new SNMP tables (index starting at 1) are now used by default, and older tables are tagged as obsolete. The older tables will be phased out in a future SNS version.
When upgrading to SNS version 5 or higher from a firewall that used the older tables, a warning appears, prompting the administrator to enable new SNMP tables by following this procedure:
To keep up to date with the recommendations in RFC2578, and to resolve a compatibility issue with some monitoring applications, all SNMP tables in which the first index was set to 0 have been duplicated to new tables in which the first index is set to 1.
These new SNMP tables (index starting at 1) are now used by default, and older tables are tagged as obsolete. The older tables will be phased out in a future SNS version.
When upgrading to SNS version 5 or higher from a firewall that used the older tables, a warning appears, prompting the administrator to enable new SNMP tables by following this procedure:
- Connect to the firewall in SSH/Console mode (admin or administrator account with Console [SSH] permissions),
- Edit the section [Config] in the ConfigFiles/snmp configuration file and set the configuration token IndexStartAt1 to "1",
- Run the SNMP agent using the command ensnmp.
The screen for configuring the SNMP service consists of three tabs:
- General: tab that is displayed by default when users click on the SNMP menu in the tree on the left, and which makes it possible to enable the module, and alarm and system notifications, which will be integrated into the available MIBs (Management Information Base) (lookup and sending of traps).
- SNMPv3: Recommended version as it is equipped with more secure tools (security tools such as authentication, encryption, timing control, etc.).
- SNMPv1 – SNMPv2c: Version for which the SNMP request contains a name called “Community”, which is used as an ID and transmitted over the network in plaintext.