CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 Platforms > Check Point SecurePlatform (SPLAT)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-06-02
Senior Member
 
Join Date: 2006-02-18
Posts: 105
Rep Power: 3
ChrisA has an average reputation (10+)
Default SNMP on SPLat Mgt Console - changing read-only string

Has anyone had success changing the read-only community string on a SPLat device? I followed the directions in sk34511 but to no avail - snmp is working and I can do the snmpwalk using the default community string, but it is not using the snmp community string I configured in /etc/snmp/snmpd.users.conf. I even tried cpstop;cpstart but no luck. Does anyone know how to change the community string? We are running R62. Thanks!
Reply With Quote
  #2 (permalink)  
Old 2008-06-02
Senior Member
 
Join Date: 2006-09-26
Posts: 856
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default Re: SNMP on SPLat Mgt Console - changing read-only string

Quote:
Originally Posted by ChrisA View Post
Has anyone had success changing the read-only community string on a SPLat device? I followed the directions in sk34511 but to no avail - snmp is working and I can do the snmpwalk using the default community string, but it is not using the snmp community string I configured in /etc/snmp/snmpd.users.conf. I even tried cpstop;cpstart but no luck. Does anyone know how to change the community string? We are running R62. Thanks!
What's not working? See below:

[Expert@P1-NGx]# more /etc/snmp/snmpd.users.conf
################################################## ###########################
#
# This file contains snmp daemon's users definitions
# This file updated automatically by snmp configuration script
# So be very careful when making changes to this file
#
################################################## ###########################

rocommunity cciesec2006
[Expert@P1-NGx]#


[root@dca2-LinuxES root]# snmpwalk -v 2c -c cciesec2006 10.109.114.9 system
SNMPv2-MIB::sysDescr.0 = STRING: Linux P1-NGx 2.4.21-21cpsmp #1 SMP Tue Sep 26 19:10:56 IDT 2006 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
SNMPv2-MIB::sysUpTime.0 = Timeticks: (3655) 0:00:36.55
SNMPv2-MIB::sysContact.0 = STRING: Unknown
SNMPv2-MIB::sysName.0 = STRING: P1-NGx
SNMPv2-MIB::sysLocation.0 = STRING: "Unknown"
SNMPv2-MIB::sysServices.0 = INTEGER: 76
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORID.1 = OID: IF-MIB::ifMIB
SNMPv2-MIB::sysORID.2 = OID: SNMPv2-MIB::snmpMIB
SNMPv2-MIB::sysORID.3 = OID: TCP-MIB::tcpMIB
SNMPv2-MIB::sysORID.4 = OID: IP-MIB::ip
SNMPv2-MIB::sysORID.5 = OID: UDP-MIB::udpMIB
SNMPv2-MIB::sysORID.6 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup
SNMPv2-MIB::sysORID.7 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance
SNMPv2-MIB::sysORID.8 = OID: SNMP-MPD-MIB::snmpMPDCompliance
SNMPv2-MIB::sysORID.9 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance
SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module to describe generic objects for network interface sub-layers
SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for SNMPv2 entities
SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing TCP implementations
SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for managing IP and ICMP implementations
SNMPv2-MIB::sysORDescr.5 = STRING: The MIB module for managing UDP implementations
SNMPv2-MIB::sysORDescr.6 = STRING: View-based Access Control Model for SNMP.
SNMPv2-MIB::sysORDescr.7 = STRING: The SNMP Management Architecture MIB.
SNMPv2-MIB::sysORDescr.8 = STRING: The MIB for Message Processing and Dispatching.
SNMPv2-MIB::sysORDescr.9 = STRING: The management information definitions for the SNMP User-based Security Model.
SNMPv2-MIB::sysORUpTime.1 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.2 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.3 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.4 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.5 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.6 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.7 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.8 = Timeticks: (1) 0:00:00.01
SNMPv2-MIB::sysORUpTime.9 = Timeticks: (1) 0:00:00.01
[root@dca2-LinuxES root]#
Reply With Quote
  #3 (permalink)  
Old 2008-06-03
Senior Member
 
Join Date: 2006-02-18
Posts: 105
Rep Power: 3
ChrisA has an average reputation (10+)
Default Re: SNMP on SPLat Mgt Console - changing read-only string

I get the response you are getting when I use the default string of public. It does not work when I change the string in /etc/snmp/snmpd.users.conf. If I try to use the new string in the snmpwalk, I get "Timeout: No response from 127.0.0.1". The command I'm doing is: snmpwalk -v 2c -c xxyyzz 127.0.0.1 1.3.6.1.2.1

If I replace xxyyzz with public, it works. It's like the system is not recognizing the change I made to /etc/snmp/snmpd.users.conf. Again, we're running R62.
Reply With Quote
  #4 (permalink)  
Old 2008-06-03
Senior Member
 
Join Date: 2006-09-26
Posts: 856
Rep Power: 3
cciesec2006 has an average reputation (10+)
Default Re: SNMP on SPLat Mgt Console - changing read-only string

Quote:
Originally Posted by ChrisA View Post
I get the response you are getting when I use the default string of public. It does not work when I change the string in /etc/snmp/snmpd.users.conf. If I try to use the new string in the snmpwalk, I get "Timeout: No response from 127.0.0.1". The command I'm doing is: snmpwalk -v 2c -c xxyyzz 127.0.0.1 1.3.6.1.2.1

If I replace xxyyzz with public, it works. It's like the system is not recognizing the change I made to /etc/snmp/snmpd.users.conf. Again, we're running R62.
did you restart the snmpd service with "service snnmpd restart"?
Reply With Quote
  #5 (permalink)  
Old 2008-06-03
Senior Member
 
Join Date: 2006-02-18
Posts: 105
Rep Power: 3
ChrisA has an average reputation (10+)
Default Re: SNMP on SPLat Mgt Console - changing read-only string

Thank you... that was it!
Reply With Quote
  #6 (permalink)  
Old 2008-06-19
Junior Member
 
Join Date: 2007-06-04
Posts: 12
Rep Power: 0
FDDIcent has an average reputation (10+)
Default Re: SNMP on SPLat Mgt Console - changing read-only string

"This file updated automatically by snmp configuration script"

Does anyone know where this script is? Editing by hand worked fine, but I assume there must be some more elegant way.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 10:21.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0