Skocz do:nawigacja, szukaj
Wiki

SNMP

Z Securepoint Wiki





























In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden






































Konfiguration of SNMP-Monitoring

Last adaptation to the version: 12.6.0

New:
  • Updated to Redesign of the webinterface

notemptyThis article refers to a Beta version

Access: UTM-IP:Port or UTM-URL:Port
Port as configured at Network / Appliance Settings / Webserver
Default-Port: 11115
i.e.: https://utm.ttt-point.de:11115
Default: https://192.168.175.1:11115 Network Appliance Settings  Area SNMP


Introduction

The SNMP protocol is used for monitoring, error detection and error notification and is standardized.
The SNMP configuration of the UTM generally allows read-only access.
The UTM supports the following version of the SNMP protocol:

  • SNMP version 1
  • SNMP version 2c
  • SNMP version 3
  • Version 3 of the SNMP protocol allows encrypted communication. SHA1 and AES are used for encryption.
    • notemptyIf this data is requested, SNMP version 3 must be used for data protection reasons mandatory!


    Configure UTM

    Enable SNMP

    SNMP Version 1 and 2c
    Caption Value Description Server configuration UTMuser@firewall.name.fqdnNetwork Server settings SNMP 1 and 2c
    SNMP Version: 12c3 Choose prefered version
    Edit Community String: public These versions use a community string that must be entered here.
    Add Network 203.0.113.0/24 Opens a window in which a new network can be created.
    notemptyIf a network is to be shared, the exact network address must be selected.
    Delete Löscht das Netzwerk
    Save Saves the settings
    SNMP Version 3
    SNMP Version: 12c3 Choose prefered version
    Server settings SNMP 3
    SNMP Version 3 Username: snmpv3user Enter username
    SNMP Version 3 Password: •••••••••• Enter password
    Save Saves the settings
  • After the SNMP setup is completed, the SNMP service should be checked under Applications Application Status and started if necessary.


    • Packet filter rule

    A packet filter rule is required to access the SNMP service. This can be added under Firewall Packet filter  button Add rule.

    General
    		Packet filter UTMuser@firewall.name.fqdnFirewallPacket filter Create packet filter rule
    Source: Monitoring Server Network object that contains the host or network that will access the SNMP service
    Destination: internal-interface The interface via which the UTM is reached
    Service: snmp Choose SNMP
    Add and close Saves the rule and closes the creation dialogue.
    Update Rules Must be clicked for the rule to be finally activated.


    OIDs

    The SNMP section of the Securepoint Reseller Portal in the download area contains a .mib file that contains all OIDs currently available on the UTM with description and can be imported into common monitoring applications.
    An overview of the most important OIDs that can be queried can be found in the article SNMP-OIDs .

    Źródło: „https://wiki.securepoint.de/index.php?title=UTM/NET/SNMP&oldid=94866”