Configuring SNMP Agent Users for Polling

After you enable SNMP traps, you can configure one or more SNMP agent users that allow the SNMP agent to poll KeyControl for system information.

The following OIDS are available for querying:

  • IF-MIB::ifTable (.1.3.6.1.2.1.2.2)
  • HOST-RESOURCES-MIB::hrFSTable (.1.3.6.1.2.1.25.3.8)
  • HOST-RESOURCES-MIB::hrSystem (.1.3.6.1.2.1.25.1)
  • 'NET-SNMP-EXTEND-MIB::nsExtendOutputFull."svstat”' (.1.3.6.1.4.1.8072.1.3.2.3.1.2.6.115.118.115.116.97.116)
  • SNMPv2-MIB::system (.1.3.6.1.2.1.1)
  • UCD-SNMP-MIB::dskTable (.1.3.6.1.4.1.2021.10)
  • UCD-SNMP-MIB::laTable (.1.3.6.1.4.1.2021.9)
  • UCD-SNMP-MIB::memory (.1.3.6.1.4.1.2021.4)
  • UCD-SNMP-MIB::systemStats (.1.3.6.1.4.1.2021.11)

Procedure 

  1. Log into the KeyControl webGUI using an account with Security Admin privileges.
  2. In the top menu bar, click Settings.
  3. In the System Settings section click SNMP Settings.
  4. Click the Agent Users tab.

  5. To create a new agent, click Actions > Add User and specify the options you want to use. When you are done, click Apply.

    Note: SNMP agent settings cannot be changed after you save the agent.

    Field

    SNMP Version

    Description

    Version

    All

    The SNMP version. KeyControl supports version 2c and version 3.

    Note: The rest of the fields displayed in page depend upon the selected version.

    Network

    2c

    An optional field that restricts access to the specified IP address of a host or network. For example: 192.168.100.0/24.

    Community

    2c

    		 The community string for your SNMP server.
    User

    3

    The user ID that should be associated with the agent.

    Security Level

    3

    This can be:

    • No Authentication, No Privacy—KeyControl sends the messages in plain text and no authentication is done by the SNMP server.
    • With Authentication, No Privacy—KeyControl sends the message in plain text but the SNMP server authenticates the message before logging it.

    • With Authentication, With Privacy—KeyControl encrypts the message before sending it and the SNMP server authenticates the message before logging it.

      For encryption, KeyControl supports AES (Advanced Encryption Standard) or DES (Data Encryption Standard).

    Authentication Protocol

    3

    The type of authentication to use with the SNMP server if one of the authentication options is selected in the Security Level field. KeyControl supports MD5 and SHA (Secure Hash Algorithm).

    Authentication Key

    3

    		 The authentication key that KeyControl should send to the SNMP manager if one of the authentication options is selected in the Security Level field. If you want to view the key in plain text, click the eye icon.

    Privacy Protocol

    3

    The privacy protocol to use if With Authentication, With Privacy is selected in the Security Level field. This can be AES or DES.

    Privacy Key

    3

    		 The privacy key to use if With Authentication, With Privacy is selected in the Security Level field. If you want to view the key in plain text, click the eye icon.
  6. To delete an existing agent, select that agent then select Actions > Delete Selected User. To delete multiple users, enable Multi-Select, click the agents you want to delete, then select Actions > Delete Selected Users.