Skip to content

Commit

Permalink
fix(snmp): corrected behaviour (#152)
Browse files Browse the repository at this point in the history
  • Loading branch information
Tbaile authored Feb 21, 2025
1 parent 1fb210d commit 45dba72
Showing 1 changed file with 13 additions and 9 deletions.
22 changes: 13 additions & 9 deletions snmp.rst
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,12 @@ SNMP Server
Simple Network Management Protocol (SNMP) provides a standardized way to monitor and manage network devices like your firewall remotely.
It allows authorized users to retrieve essential information like device status, performance metrics, and configuration settings.

The SNMP server is **enabled by default** on your firewall, allowing access from within your local area network (LAN) on all IPv4 and IPv6 addresses.
The SNMP server is **disabled by default** on your firewall, allowing access from within your local area network (LAN) on all IPv4 and IPv6 addresses.

.. note::

If the system has been updated from v1.4.1 or earlier, the SNMP server will be **enabled by default**. To disable
it, follow the steps in the :ref:`Disabling the SNMP Server <snmp-server-disabling>` section.

Configuring the SNMP Server
---------------------------
Expand All @@ -18,14 +23,16 @@ It's crucial to configure essential information that identifies your device. Her

.. code-block:: bash
uci set snmpd.general.enabled=1
uci set snmpd.@system[0].sysLocation='<string>'
uci set snmpd.@system[0].sysContact='<string>'
uci set snmpd.@system[0].sysName='<string>'
Replace `<string>` with the relevant information. For example:

.. code-block:: bash
uci set snmpd.general.enabled=1
uci set snmpd.@system[0].sysLocation='MyOffice'
uci set snmpd.@system[0].sysContact='[email protected]'
uci set snmpd.@system[0].sysName='firewall.nethsecurity.org'
Expand All @@ -35,19 +42,16 @@ Replace `<string>` with the relevant information. For example:
.. code-block:: bash
uci commit snmpd
4. Restart the SNMP server to ensure the configurations take effect:

.. code-block:: bash
/etc/init.d/snmpd restart
reload_config
The SNMP server configuration is stored in the `/etc/config/snmpd` file.

You can test the configuration by using an SNMP client like `snmpwalk` or `snmpget` from a remote machine. For example: ::

snmpwalk -v 2c -c public 127.0.0.1

.. _snmp-server-disabling:

Disabling the SNMP Server
-------------------------

Expand All @@ -60,7 +64,7 @@ If you don't require remote access to the SNMP server, you can disable it for ad
uci set snmpd.general.enabled=0
uci commit snmpd
/etc/init.d/snmpd stop
reload_config
**Remember:** Disabling the SNMP server might impact monitoring tools or applications relying on it.

Expand Down

0 comments on commit 45dba72

Please sign in to comment.