Chapter 4   Configuring SNMP to Monitor iAS with Third-Party Tools


This chapter describes how to configure Simple Network Management Protocol (SNMP) so that you can monitor iPlanet Application Server with third-party SNMP management tools.

The following topics are included in this chapter:

• About SNMP

• Enabling SNMP Statistics Collection on iAS

• About the Management Information Base (MIB)

• Setting Up the Master Agent and SubAgents

About SNMP

---

SNMP is a protocol used to exchange data about network activity. With SNMP, data travels between your application server and a workstation where network management software is installed. From this workstation, you can remotely monitor your network and exchange information about network activity between servers. For example, using an application like HP OpenView, you can monitor which iPlanet Application Server (iAS) machines are running, as well as the number and type of error messages your application servers receive.

Your network management workstation exchanges information with the application servers in your enterprise through two types of agents: the subagent and the master agent. The subagent gathers information about an application server and passes that information to the master agent. The master agent exchanges information between the various subagents and the network management workstation. The master agent runs on the same host machine as the subagents with which it communicates.

Figure 4-1    SNMP Agent Support Architecture

Enabling SNMP Statistics Collection on iAS

---

The iAS SNMP subagent does not report SNMP statistics to the network management workstation unless you enable statistics collection. If statistics collection is not enabled, the subagent cannot be started.

---

Note	If the network management workstation experiences difficulty obtaining SNMP statistics, check the server log information: <iAS installation directory>/mail-instanceName/log/default

---

If the SNMP data collection process (snmpcoll), is not running, check the Administration Server Console to see whether the SNMP enable flag is on. For more information, see Managing Servers with Netscape Console on the following web site (http://home.netscape.com/eng/server/console/).

If you disable the start-up server, this collection process is also disabled.

To enable data collection, perform the following steps:

1. Click the General button on the iAS Administration Tool toolbar to open the General window. Finally, click the SNMP tab.

   
   
   

2. Check the Enable SNMP Administration and Monitoring check box.

   This step enables the SNMP subagent to publish statistics about the application server to the master agent.

3. Check the Enable SNMP Debug to log error messages if there is a problem with connecting to the master agent.

4. Specify the Connection Attempt interval.

   This is the time interval in which the subagent will attempt to connect to the master agent. Note you will have to re-start the iAS server for these settings to take affect.

Your configuration information is stored in Directory Server.

About the Management Information Base (MIB)

---

iPlanet Application Server (iAS) stores variables pertaining to network management in a tree-like hierarchy known as the server's management information base (MIB). iAS reports significant events to the network management workstation by sending messages containing these variables. The network management workstation can also query the server's MIB for data or can remotely change variables stored in the MIB.

Formatting MIB Entries

The MIB file contains the definitions for managed objects, or variables, that store network information for the server. Each variable definition includes the variable name, its data type and read/write access level, a brief description, and a permanent object identifier.

This sample entry shows the definition for the nsmailEntityDescr variable:

nasKesMaxThread OBJECT-TYPE / object type SYNTAX INTEGER (SIZE (1..512)) / syntax ACCESS read-write / read/write access level STATUS mandatory / status DESCRIPTION / description "The maximum number of threads used to serve requests." ::= { kes 4 } / object identifier

This definition contains the following information:

• Object Type: gives the name of the variable, in this case, iasKesMaxThread.

• Syntax: gives the abstract data type of the variable object type in ASN.1 notation. For example, the Syntax of the nasKesMaxThread variable is INTEGER (SIZE (1..512)).

• Access: gives the read/write access level to the variable. Possible access levels are read-only, read-write, write-only, or not-accessible.

• Status: tells whether the element is mandatory, optional, or obsolete.

• Description: text description of the element, enclosed in quotes. For example, the description of the nasKesMaxThread variable is "The maximum number of threads used to serve requests."

• Object Identifier: assigned name that serves as a permanent identifier for each managed object in the MIB name tree in its name space. Objects in SNMP are hierarchical; the object identifier is a sequence of labels that represents the object in the hierarchy. For example, nasKesMaxThread is identified as kes 4. This means that it has the label 4 in the subtree kes.

  kes, in turn, has the label 4 in the kesTable subtree.

Making iAS MIB Available on SNMP Third-Party Management Software

Refer to the SNMP management software for detailed procedures for making the MIB available. In general, you have to copy the iAS MIB to the Network Management machine and then load it into the SNMP management software's MIB database.

You can find the iAS MIB in the following location:

iAS install directory/ias/snmp/gxnas.mib

Additional iAS MIBs are located at:

iAS install directory/plugins/snmp/

Note that the additional MIBs are not required for iAS SNMP monitoring.

Setting Up the Master Agent and SubAgents

---

The SNMP Master agent is native to your Solaris operating system. Master agent operation is defined in an agent configuration file called CONFIG. You can edit the CONFIG file manually.

---

Note	This procedure assumes that you are running Solaris 2.6 with recommended patches. It also assumes that iPlanet Web Server is installed.

---

To configure the master SNMP agent, perform the following steps:

1. Log in as root.

2. Check to see if there is a Solaris SNMP daemon (snmpdx) running on port 161.

   If an SNMP daemon is running, make sure you know how to restart it and which MIB trees it supports. Then kill its process.

3. Edit the Solaris SNMP daemon start-up file s76snmpdx in /etc/rc3.d to modify the port to which the daemon listens.

   In the start section, replace the line

      /usr/lib/snmp/snmpdx -y -c /etc/snmp/conf

   or

      /usr/lib/snmpdx -p 161 -y -c /etc/snmpconf

   with

      /usr/lib/snmp/snmpdx -p 1161 -y -c /etc/snmp/conf

   You have changed the port to which the daemon listens from 161 to 1161.

4. Edit the CONFIG file located in <iAS installation directory/ias/snmp in the server root directory.

   The CONFIG file defines the community and the manager that the master agent will work with. The manager value should be a valid system name or an IP address. The following is an example of a basic CONFIG file:

   COMMUNITY	public ALLOW ALL OPERATIONS
   MANAGER	your_manager_station_name SEND ALL TRAPS TO PORT 162 WITH COMMUNITY public

5. (Optional) Define sysContact and SysLocation variables in the CONFIG file.

   You can edit the CONFIG file to add initial values for sysContact and sysLocation which specify the sysContact and sysLocation MIB-II variables. Note that the strings for sysContact and sysLocation in this example are enclosed in quotes. Any string that contains spaces, line breaks, tabs, and so on must be in quotes. You can also specify the value in hexadecimal notation.

   In this sample CONFIG file, sysContract and sysLocation variables are defined:

   COMMUNITY	public ALLOW ALL OPERATIONS
   MANAGER	nms2 SEND ALL TRAPS TO PORT 162 WITH COMMUNITY public
   INITIAL	sysLocation "Server room 501 East Middlefield Road Mountain View, CA 94043 USA"
   INITIAL	sysContact "John Doe email: <jdoe@iPlanet.com>"

The encapsulator forwards requests from the master agent to the Solaris agent that now listens on port 1161.

6. Edit the file CONFIG_SAGT, modifying the following lines:

      Agent at 1161 with Community Public

   This configures the subagent to serve the Solaris agent on port 1161.

      Subtrees <list of oids>

   This configures the SNMP subtrees served by the Solaris agent.

      Forward All Traps

   This ensures that all traps sent by the Solaris agent are forwarded to the master agent.

Starting the SNMP Master Agent

Once you have installed the SNMP master agent, you can start it manually or by using Netscape Console.

To start the master agent manually, enter the following at the command prompt:

# magt CONFIG INIT &

The INIT file is a nonvolatile file that contains information from the MIB-II system group, including system location and contact information. If INIT doesn't already exist, starting the master agent for the first time will create it. An invalid manager name in the CONFIG file will cause the master agent start up to fail.

---

Note	INIT contains information about the local system. This file is created the first time you start the master agent. You should not copy this file across machines.

---

To automatically start the master agent when you start the server, perform the following steps:

1. Edit the files ias/snmp/k75snmpmagt and ias/snmp/s75snmpmagt.

2. Change $GX_ROOTDIR to the iAS installation directory path if this variable is not yet defined in the root's environment.

3. Copy k75snmpmagt to /etc/rc2.d and s75snmpmagt to /etc/rc3.d.

To start a master agent manually on a nonstandard port, use one of two methods:

• Method 1: In the CONFIG file, specify a transport mapping for each interface over which the master agent listens for SNMP requests from managers. Transport mappings allow the master agent to accept connections at the standard port and at a nonstandard port. The master agent can also accept SNMP traffic at a nonstandard port. The maximum number of concurrent SNMP is limited by your target system's limits on the number of open sockets or file descriptors per process. The following is an example of a transport mapping entry:

  TRANSPORT	extraordinary SNMP OVER UDP SOCKET AT PORT 11161

  After editing the CONFIG file manually, you should start the master agent manually by typing the following at the command prompt:

     # magt CONFIG INIT&

• Method 2: Edit the /etc/services file to allow the master agent to accept connections at the standard port as well as at a nonstandard port.

Verifying SNMP Configuration

After you have performed the procedures outlined in this chapter, you can verify SNMP setup.

To verify SNMP, perform the following:

1. Stop iAS.

      iAS installation directory/ias/bin/KIVAes stop

   Also make sure that all iAS processes (kas, kxs, kjs, kcs) are stopped. You can determine if any of them are running by using the UNIX ps command.

2. Verify that the LDAP server (slapd) is running using the UNIX ps command. If it is not running start slapd as follows:

      iAS installation directory/slapd-snickers/start-slapd

   where "snickers" is the servername.

3. Verify that iPlanet Web Server (iWS) (e.g. https-servername) is running using the ps command. If it is not running start it as follows:

      /usr/iplanet/suitespot/https-snickers/start

   where "snickers" is the servername.

4. Verify that the Solaris SNMP agent (snmpdx) is running using the UNIX ps command as follows:

      ps -ef | grep snmpd

   If it is not running, start it with:

      /etc/rc3.d/S75snmpmagt start

5. Verify that the iAS Master Agent (magt) and encapsulator/proxy subagent (sagt) are running using the UNIX ps command as follows:

      ps -ef | grep magt

      ps -ef | grep sagt

   If they are not running, start them with:

      /etc/rc3.d/S75snmpmagt start

6. Start iAS.

      <iAS installation directory>/ias/bin/KIVAes.sh start

7. Use your third-party SNMP management software's MIB browser or test utility (e.g. snmpwalk) to confirm that SNMP data is being collected.