[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference lassie::ucx

Title:DEC TCP/IP Services for OpenVMS
Notice:Note 2-SSB Kits, 3-FT Kits, 4-Patch Info, 7-QAR System
Moderator:ucxaxp.ucx.lkg.dec.com::TIBBERT
Created:Thu Nov 17 1994
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:5568
Total number of notes:21492

5290.0. "UCX services "SNMP" and "ESNMP": how to config ?" by FRUST::LUKAS (Unix starts with an `L') Mon Mar 03 1997 08:58

Hello again,

as you can read in topic 5232.* I am able to successfully build the eSNMP
example chess-mib subagent.

Now I am doing some testing on this example chess-mib subagent.

... and once more I have got one problem with this thing.

I could read every MIB-variable of the chess-subagent with my Network
Management Station
(MibMaster, an excellent Web-based MIB Browser from Equivalence)
but I am not able to set any value of the "read-write" accessable MIB-variables.
I have got some error message like "SNMP set request returned such name".

I am using the SNMP community "public" for get and set requests.

What is wrong here ?

Could this have something to do with the UCX Services "SNMP" and ESNMP" ?

Though they were both disabled, I could get SNMP values from the chess-mib
subagent.

So what are the two UCX services "SNMP" and "ESNMP" for ?
Do they have to be configured and how do they have to be configured ?

Here is the UCX SHOW SERVICES output from my system:

------------------------------------------------------------------------------- 
Service             Port  Proto    Process          Address            State
 
ESNMP                242  UDP      ESNMP            0.0.0.0             Disabled
FINGER                79  TCP      UCX$FINGER       0.0.0.0             Enabled
FTP                   21  TCP      UCX$FTPD         0.0.0.0             Enabled
MOUNT                 10  UDP      UCX$NFS_M        0.0.0.0             Enabled
NFS                 2049  UDP      UCX$NFS          0.0.0.0             Enabled
PORTMAPPER           111  TCP,UDP  UCX$PORTM        0.0.0.0             Enabled
REXEC                512  TCP      UCX$REXECD       0.0.0.0             Enabled
RLOGIN               513  TCP      not defined      0.0.0.0             Enabled
RSH                  514  TCP      UCX$RSHD         0.0.0.0             Enabled
SNMP                 161  UDP      UCX$SNMP         0.0.0.0             Disabled
TELNET                23  TCP      not defined      0.0.0.0             Enabled
-------------------------------------------------------------------------------

Could anybody help me ?


regards,

Dieter
T.RTitleUserPersonal
Name		DateLines
5290.1How to allow SET requests on MIB variables in UCX/eSNMPFRUST::LUKASUnix starts with an `L'Tue Mar 04 1997 08:2173
... and so I am responding to myself once again, because I have fixed the
SET request problem with the UCX/eSNMP example chess-mib subagent.

There are two things you must consider:

1. There must be a SNMP community with read-write access.

   Online UCX Help says that the only access type allowed is READ,
   but this can't be true for an officially supported product.
   So I have tried access type WRITE and it was accepted by UCX.
   Now I have got an SNMP Configuration with the default community
   "public" , Type "Read Write" and Address_List 0.0.0.0.
   
2. But this one alone does not solve my problem, I still got SET-request
   errors. Fortunately I found out in one of the SNMP related replies of
   this conference, that there are some "flags" available:
   A "Authen" flag and a "Sets" flag. The first one enables Authentication-
   Traps and the second one allows you to SET values to MIB variables.

With these two workarounds, which are nowhere documented I have got the
chess-mib subagent working for GETs and SETs.

As I asked in .0 about the two services "SNMP" and "ESNMP" and their function
I have found out that these two services are in the UCX Service Configuration
Database after doing a @SYS$MANAGER:UCX$CONFIG.
The service "SNMP" can be enabled or disabled, it has no effect to accessing
the eSNMP subagents. The service "ESNMP" cannot be enabled, you will get an
error message like: %UCX-E-STARTERROR, Error starting ESNMP service
-RMS-F-IOP, operation invalid for file organization or device
So I leave/set these two services DISABLED.

To summarize all the above I have listed the UCX command sequence, which
works in my environment:

UCX>  SET CONFIG NOSNMP
UCX>  SET CONFIG SNMP /COMMUNITY="public" /TYPE=READ /CONTACT="Dieter Lukas" -
_UCX> /LOCATION=(FIRST="Take care",SECOND="and",THIRD="stay alive !!!") -
_UCX> /FLAGS=(AUTHEN,SETS) /ADDRESS=(16.185.224.12, 16.185.240.232)
UCX>  SET CONFIG SNMP /COMMUNITY="bvin" /TYPE=WRITE -
_UCX> /ADDRESS=(16.185.224.12,16.185.240.232)
UCX>  SHOW CONFIG SNMP/FULL

As you can see I use two seperate communities for read and read/write access,
and I am not allowing every host to access my system.

Here is the resulting output of the "SHOW CONFIG SNMP/FULL" UCX command:

------------------------------------------------------------------------------ 
SNMP Configuration
  
Flags:    AuthenTraps Sets                        
  
Contact:  Dieter Lukas
  
Location   
  First:  Take care
  Second: and
  Third:  stay alive !!!
 
Community           Type       Address_list
 
public              Read       16.185.224.12, 16.185.240.232
 
bvin                Read Write 16.185.224.12, 16.185.240.232

------------------------------------------------------------------------------


regards,

Dieter Lukas
Technology Consultant
Digital Frankfurt/Germany