1
###############################################################################
4
# An example configuration file for configuring the Net-SNMP agent ('snmpd')
5
# See the 'snmpd.conf(5)' man page for details
7
# Some entries are deliberately commented out, and will need to be explicitly activated
9
###############################################################################
14
# Listen for connections from the local system only
15
agentAddress udp:127.0.0.1:161
16
# Listen for connections on all interfaces (both IPv4 *and* IPv6)
17
#agentAddress udp:161,udp6:[::1]:161
21
###############################################################################
23
# SNMPv3 AUTHENTICATION
25
# Note that these particular settings don't actually belong here.
26
# They should be copied to the file /var/net-snmp/snmpd.conf
27
# and the passwords changed, before being uncommented in that file *only*.
28
# Then restart the agent
30
# createUser authOnlyUser MD5 "remember to change this password"
31
# createUser authPrivUser SHA "remember to change this one too" DES
32
# createUser internalUser MD5 "this is only ever used internally, but still change the password"
34
# If you also change the usernames (which might be sensible),
35
# then remember to update the other occurances in this example config file to match.
39
###############################################################################
44
# system + hrSystem groups only
45
view systemonly included .1.3.6.1.2.1.1
46
view systemonly included .1.3.6.1.2.1.25.1
48
# Full access from the local host
49
#rocommunity public localhost
50
# Default access to basic system info
51
rocommunity public default -V systemonly
53
# Full access from an example network
54
# Adjust this network address to match your local
55
# settings, change the community string,
56
# and check the 'agentAddress' setting above
57
#rocommunity secret 10.0.0.0/16
59
# Full read-only access for SNMPv3
61
# Full write access for encrypted requests
62
# Remember to activate the 'createUser' lines above
63
#rwuser authPrivUser priv
65
# It's no longer typically necessary to use the full 'com2sec/group/access' configuration
66
# r[ou]user and r[ow]community, together with suitable views, should cover most requirements
70
###############################################################################
75
# Note that setting these values here, results in the corresponding MIB objects being 'read-only'
76
# See snmpd.conf(5) for more details
77
sysLocation Sitting on the Dock of the Bay
78
sysContact Me <me@example.org>
79
# Application + End-to-End layers
86
# At least one 'mountd' process
88
# No more than 4 'ntalkd' processes - 0 is OK
90
# At least one 'sendmail' process, but no more than 10
93
# Walk the UCD-SNMP-MIB::prTable to see the resulting output
94
# Note that this table will be empty if there are no "proc" entries in the snmpd.conf file
100
# 10MBs required on root disk, 5% free on /var, 10% free on all other disks
105
# Walk the UCD-SNMP-MIB::dskTable to see the resulting output
106
# Note that this table will be empty if there are no "disk" entries in the snmpd.conf file
112
# Unacceptable 1-, 5-, and 15-minute load averages
115
# Walk the UCD-SNMP-MIB::laTable to see the resulting output
116
# Note that this table *will* be populated, even without a "load" entry in the snmpd.conf file
120
###############################################################################
126
trapsink localhost public
128
#trap2sink localhost public
129
# send SNMPv2c INFORMs
130
#informsink localhost public
132
# Note that you typically only want *one* of these three lines
133
# Uncommenting two (or all three) will result in multiple copies of each notification.
137
# Event MIB - automatically generate alerts
139
# Remember to activate the 'createUser' lines above
140
iquerySecName internalUser
142
# generate traps on UCD error conditions
144
# generate traps on linkUp/Down
145
linkUpDownNotifications yes
149
###############################################################################
151
# EXTENDING THE AGENT
155
# Arbitrary extension commands
157
extend test1 /bin/echo Hello, world!
158
extend-sh test2 echo Hello, world! ; echo Hi there ; exit 35
159
#extend-sh test3 /bin/sh /tmp/shtest
161
# Note that this last entry requires the script '/tmp/shtest' to be created first,
162
# containing the same three shell commands, before the line is uncommented
164
# Walk the NET-SNMP-EXTEND-MIB tables (nsExtendConfigTable, nsExtendOutput1Table
165
# and nsExtendOutput2Table) to see the resulting output
167
# Note that the "extend" directive supercedes the previous "exec" and "sh" directives
168
# However, walking the UCD-SNMP-MIB::extTable should still returns the same output,
169
# as well as the fuller results in the above tables.
173
# "Pass-through" MIB extension command
175
#pass .1.3.6.1.4.1.8072.2.255 /bin/sh PREFIX/local/passtest
176
#pass .1.3.6.1.4.1.8072.2.255 /usr/bin/perl PREFIX/local/passtest.pl
178
# Note that this requires one of the two 'passtest' scripts to be installed first,
179
# before the appropriate line is uncommented.
180
# These scripts can be found in the 'local' directory of the source distribution,
181
# and are not installed automatically.
183
# Walk the NET-SNMP-PASS-MIB::netSnmpPassExamples subtree to see the resulting output
189
# Run as an AgentX master agent
191
# Listen for network connections (from localhost)
192
# rather than the default named socket /var/agentx/master
193
#agentXSocket tcp:localhost:705