2.进入源码目录#cd net-snmp-5.3.3
3Configure
#./configure --prefix=/usr/local/net-snmp --enable-mfd-rewrites --with-default-snmp-version="2" --with-logfile="/var/log/snmpd.log" --with-persistent-directory="/var/net-snmp"
编译完有出现以下提示,一直按回车就行
system contact information (root@):
system Location (Unknown):
4.编译安装#make && make install
5.拷贝配置文件模板
将EXAMPLE.conf文件复制到/usr/local/net-snmp/share/snmp/,并重命名为snmpd.conf
#cp EXAMPLE.conf /usr/local/net-snmp/share/snmp/snmpd.conf
6. 修改配置文件修改配置文件
#vi /usr/local/net-snmp/share/snmp/snmpd.conf
找sec.name把原来
# sec.name source community
com2sec local localhost public
com2sec mynetwork NETWORK/24 public
改为以下
# sec.name source community
com2sec local localhost public
com2sec mynetwork 192.168.1.0/24 public
com2sec mynetwork 192.168.1.163 public
--------------------------------------------------------------------------------------
我自己的配置
####
# First, map the community name "public" into a "security name"
1) 设置监控机的IP或监控机的网段,以及团体字映射到安全名
# sec.name source community
com2sec notConfigUser default public
com2sec localhost localhost public
com2sec mynetwork 192.168.1.170 public
com2sec mynetwork 192.168.1.0/24 public
2) 映射组名和安全名
####
# Second, map the security name into a group name:
# groupName securityModel securityName
group notConfigGroup v1 notConfigUser
group notConfigGroup v2c notConfigUser
group MyRWGroup v2c local
group MyRWGroup v2c localhost
group MyROGroup v2c mynetwork
####
# Third, create a view for us to let the group have rights to:
3)设置mib subtree视图
# Make at least snmpwalk -v 1 localhost -c public system fast again.
# name incl/excl subtree mask(optional)
view all systemview included .1 80
view systemview included .1.3.6.1.2.1.1
view systemview included .1.3.6.1.2.1.25.1.1
####
# Finally, grant the group read-only access to the systemview view.
设置read/write权限
# group context sec.model sec.level prefix read write notif
access notConfigGroup "" any noauth exact systemview none none
access MyROGroup "" any noauth exact all none none
access MyRWGroup "" any noauth exact all all none
-----------------------------------------------------------------------------------------------------------
Sec.name是定义的别名,在后面的组中使用,组要用来赋予权限,是只读还是读写,source是允许那个地址来连接你的snmp,我现在写的这个是允许192.168.1.163这个地址来连接,如果你需要使用一个网段的话,那么就可以这么写了192.168.1.0/24,这个看的明白吧,community是共同体的名称,你用client连接snmp使用的,相当于密码
7. net-snmp自动设置
在/etc/rc.local未尾加上这句
/usr/local/net-snmp/sbin/snmpd -c /usr/local/net-snmp/share/snmp/snmpd.conf &
/usr/local/net-snmp/sbin/snmpd
8.设置环境变量为了下一步的测试命令
9在/etc/profile文件开头加这句
PATH=/usr/local/net-snmp/bin:/usr/local/net-snmp/sbin:$PATH下载本文