topic Re: SNMP Access List in Operating System - HP-UX

SNMP Access List

Giuseppe_13 — Mon, 21 Nov 2005 04:43:02 GMT

How is possible to filter the snmp access to the HP-UX 11.0 server configuring an access list ?

For Example, the telnet access is possible to filter by /var/adm/inetd.sec file (Access List).
How about snmp protocol ?

Thanks

Re: SNMP Access List

RAC_1 — Mon, 21 Nov 2005 04:51:05 GMT

you need to block ports than snmp uses.
check /etc/services and /etc/inetd.conf file.

you need to disable snmp daemon startup.

Look at following files.

-r-xr-xr-x 1 bin bin 2589 Aug 15 2003 /sbin/init.d/SnmpFddi4
-r-xr-xr-x 1 bin bin 6617 Dec 16 2002 /sbin/init.d/SnmpHpunix
-r-xr-xr-x 1 bin bin 4558 Dec 16 2002 /sbin/init.d/SnmpMaster
-r-xr-xr-x 1 bin bin 6727 Dec 16 2002 /sbin/init.d/SnmpMib2
-r-xr-xr-x 1 bin bin 6631 Dec 16 2002 /sbin/init.d/SnmpTrpDst

Re: SNMP Access List

Giuseppe_13 — Mon, 21 Nov 2005 05:28:19 GMT

I need to allow access to some IP Address but not all IP address.

I can't to disable the nsmp services.

Re: SNMP Access List

Giuseppe_13 — Mon, 21 Nov 2005 05:28:31 GMT

I need to allow access to some IP Address but not all IP address.

I can't to disable the snmp services.

Re: SNMP Access List

RAC_1 — Mon, 21 Nov 2005 05:38:52 GMT

You will have to set this in snmpd.conf file.
The file resides in directory-/etc/SnmpAgent.d/

man snmpd.conf for details.