SNMP Public Community string

[MikeL_4]

I received a note from our auditors stating that the: "public" (default) SNMP community string still works, on our servers... Can you tell me what I need to check and how to turn it off ???

Thanks

[MikeL_4]

ps: This is a Red Hat Linux server....

[Ivan Ferreira · Accepted solution]

Check the /etc/snmp/snmpd.conf file. If you don't use SNMP disable the service with:

chkconfig snmpd off
service snmpd stop

[MikeL_4]

I've attached a copy of the snmpd.conf file on our servers in case it helps...

I am not familiar with snmp at all and this is the first time I've looked at the config file for it...

I believe I would need to change the com2sec, group, view, and access lines some how but now sure where to even start...

[Jeeshan]

simply # on the every line in your snmpd.conf file you attached.

[Alexander Chuzhoy]

from the cli run the following command:

snmpwalk -v1 -c public

where is the address of the server to check.


If you get lots of lines with values - the snmpd server is up and it accepts "public" as community.