Disabling SNMP

[manoj_pu]

Hello Admins,
Due to security vulnerabilities in SNMP, we plan to disable SNMP in all our Sun boxes. Does anyone aware of the impact of disabling SNMP on hp-ux 11i?

Thanks in advance,
Manoj

[Michal Kapalka (mikap)]

hi,

its depend if you need tu run SNMP ???,

some monitoring tools using a agents that comunicating trough SNMP.

mikap

[manoj_pu]

We have no additional monitoring process other than default o/s tools like glance & mwa.

Would disabling snmp cause problem to any of the o/s process/agent?

Please provide your input.

Regards,
Manoj

[Michal Kapalka (mikap)]

ok you could run the snmp on the localhost.

mikap

[Bill Hassell]

The OS doesn't use SNMP. The SNMP tools will create or respond to events but without any network monitoring software, there is no reason to run them.

To stop all the SNMP processes:

for SERVICE in /sbin/init.d/Snmp*
do
$SERVICE stop_msg
$SERVICE stop
done

Then edit each of the files in /etc/rc.config.d directory that start with: Snmp and change the enabling variable to zero. For example:

file: /etc/rc.config.d/SnmpHpunix

SNMP_HPUNIX_START=1 # Start the hp-unix MIB SNMP subAgent by default.
export SNMP_HPUNIX_START

change to: SNMP_HPUNIX_START=0