topic Re: Disabling SNMP in Operating System - HP-UX

Disabling SNMP

manoj_pu — Fri, 04 Dec 2009 14:34:34 GMT

Hello Admins,
Due to security vulnerabilities in SNMP, we plan to disable SNMP in all our Sun boxes. Does anyone aware of the impact of disabling SNMP on hp-ux 11i?

Thanks in advance,
Manoj

Re: Disabling SNMP

Michal Kapalka (mikap) — Fri, 04 Dec 2009 14:53:53 GMT

hi,

its depend if you need tu run SNMP ???,

some monitoring tools using a agents that comunicating trough SNMP.

mikap

Re: Disabling SNMP

manoj_pu — Fri, 04 Dec 2009 15:00:31 GMT

We have no additional monitoring process other than default o/s tools like glance & mwa.

Would disabling snmp cause problem to any of the o/s process/agent?

Please provide your input.

Regards,
Manoj

Re: Disabling SNMP

Michal Kapalka (mikap) — Fri, 04 Dec 2009 15:02:20 GMT

ok you could run the snmp on the localhost.

mikap

Re: Disabling SNMP

Bill Hassell — Fri, 04 Dec 2009 16:26:08 GMT

The OS doesn't use SNMP. The SNMP tools will create or respond to events but without any network monitoring software, there is no reason to run them.

To stop all the SNMP processes:

for SERVICE in /sbin/init.d/Snmp*
do
$SERVICE stop_msg
$SERVICE stop
done

Then edit each of the files in /etc/rc.config.d directory that start with: Snmp and change the enabling variable to zero. For example:

file: /etc/rc.config.d/SnmpHpunix

SNMP_HPUNIX_START=1 # Start the hp-unix MIB SNMP subAgent by default.
export SNMP_HPUNIX_START

change to: SNMP_HPUNIX_START=0