Oracle^® ILOM Protocol Management Reference for SNMP and IPMI Firmware Release 3.2.x

Set SNMP Access and Authorization

Before You Begin

• To modify SNMP properties in Oracle ILOM, you must have the Admin role (a) enabled.

• The SNMP servicestate property is, by default, shipped from the factory enabled.

• The SNMP sets write access property is, by default, shipped from the factory disabled. To allow SNMP write access to Oracle ILOM, you must enable the SNMP sets property.

  ---

  Note -  When you are working in the Oracle ILOM CLI, if the sets parameter is disabled, all SNMP MIB objects are read-only and no snmpset commands are processed.

  ---

• Oracle ILOM provides authentication properties for each of the following SNMP protocol versions: v1, v2c, and v3.

  • For SNMP v1 and v2c, Oracle ILOM provides the public and private targets within the communities target for managing user authentication.

  • For SNMP v3, Oracle ILOM provides a users target for managing user authentication. The SNMPv3 users target is not shipped from the factory with pre-packaged values for users.

To set the SNMP service state, properties, follow these steps:

1. Log in to the Oracle ILOM CLI.
2. To view the Oracle ILOM SNMP properties, type:

   -> show /SP/services/snmp

   The following SNMP output appears.

   -> show /SP/services/snmp
      /SP/services/snmp
      Targets:
        communities
        mibs
        users
      Properties:
        engineid = none
        port = 161
        servicestate = (enabled)
        sets = disabled
        v1 = disabled
        v2c = disabled
        v3 = enabled 
     Commands: 
        cd
        set
        show
   

3. Use the set command to change any of the SNMP properties, for example:

   • To enable SNMP with read-only access, type:

     -> set /SP/services/snmp servicestate=enabled

   • To enable SNMP write access, type:

     -> set /SP/services/snmp sets=enabled

   • To enable the SNMP protocol version (v1, v2c, or v3) property, type:

     -> set /SP/services/snmp v#=enabled

     where # is the SNMP protocol version you want to enable.

   For more information about SNMP user accounts and read and write access, see Managing SNMP User Accounts and Communities.

4. Use the create command to create an SNMP v3 user account, for example:

   • To create a user account for authorization and provide read and write access, type:

     -> create /SP/services/snmp/users/<useraccountname> authenticationpassword=password permission=rw

   • To create a user account for authorization and provide read-only access, type:

     -> create /SP/services/snmp/users/<useraccountname> authenticationpassword=password

   For more information about SNMP user accounts and read and write access, see Managing SNMP User Accounts and Communities.