本文介绍如何在CentOS环境下配置一个简单的SNMP服务软件安装切换到系统管理员帐户安装snmp确认snmp代理已安装rpm-qnet-snmp如果未安装,安装snmpyuminstallnet-snmp设置开机自动运行snmp/sbin/chkconfigsnmpdon配置snmp修改配置文件将原来的配置文件备份,编辑/etc/snmp/snmpd.conf,简单配置如下#First,mapthecommunitynamepublicintoasecurityname#sec.namesourcecommunitycom2secnotConfigUserdefaultpublic#####Second,mapthesecuritynameintoagroupname:#groupNamesecurityModelsecurityNamegroupnotConfigGroupv1notConfigUsergroupnotConfigGroupv2cnotConfigUser#####Third,createaviewforustoletthegrouphaverightsto:#Makeatleastsnmpwalk-v1localhost-cpublicsystemfastagain.#nameincl/exclsubtreemask(optional)viewsystemviewincluded.1.3.6.1.2.1.1viewsystemviewincluded.1.3.6.1.2.1.25.1.1#####Finally,grantthegroupread-onlyaccesstothesystemviewview.#groupcontextsec.modelsec.levelprefixreadwritenotifaccessnotConfigGroupanynoauthexactsystemviewnonenone启动snmp/etc/init.d/snmpdstart如果已启动则重启snmp服务/etc/init.d/snmpdrestart测试snmp查看端口是否打开netstat-ln|grep161安装snmp测试工具yuminstallnet-snmp-utils本机测试snmp数据(修改monit为配置的团体名)snmpwalk-v2c-cpubliclocalhostsystemsnmpwalk-v3-uusername-lauth-aMD5-Apasswordlocalhost创建SNMP(v3)用户net-snmp-config--create-snmpv3-user-ro-aMD5lyceemsnmplyceem.com故常处理错误排除如果本地测试snmp有数据,远程测试snmp无数据则由于服务器防火墙禁止了外部访问服务器udp161端口,则:修改/etc/sysconfig/iptables(或者:/etc/sysconfig/iptables-config),增加如下规则:-ARH-Firewall-1-INPUT-pudp-mstateCstateNEW-mudpCdport161-jACCEPT重启iptables/etc/init.d/iptables restart
