This appendix includes the following sections:
For optimal SNMP security, Oracle recommends using the SNMP v3 protocol for communication between STA and the libraries. See "Understanding Library SNMP Configuration for STA" for details.
The SNMP v2c protocol is less secure than SNMP v3 and by default is not enabled on STA. However, if SNMP v3 communication is not possible—for instance, SNMP v3 is not configured on a library that STA will be monitoring—you can enable and configure SNMP v2c mode for STA.
The SNMP v3 configuration process is described in Chapter 5, "Configuring SNMP on the Libraries" and Chapter 6, "Configuring Library Connections in STA". This appendix describes the procedures that differ for SNMP v2c configuration.
The process for configuring the libraries and STA to use SNMP v2c for SNMP communications is as follows:
In Chapter 5, follow all procedures shown in Table 5-1, "Tasks to Configure Libraries for STA", except:
Replace "Create the STA SNMP v3 Trap Recipient" with "Create the STA SNMP v2c Trap Recipient on the Library".
After completing the process in Table 5-1, perform "Enable SNMP v2c Mode for STA".
Configure SNMP v2c in STA. See Chapter 6, "Configuring Library Connections in STA" for instructions.
Use this procedure to define the STA server as an authorized recipient of SNMP v2c traps and to define traps the library sends. Depending on library model, you can use the library CLI, SL Console, or SL150 browser interface.
Notes:
Separate trap levels with commas.
To avoid duplicate records, do not define the STA server as a trap recipient in multiple instances. For example, do not create both an SNMP v3 and SNMP v2c trap recipient definition for the STA server.
Trap level 4 may not be supported by older library firmware versions; however, it can always be specified when creating a trap recipient.
To avoid entry errors in the CLI, you can first type the command in a text file, and then copy and paste it into the CLI. For help with CLI commands, type help snmp.
Oracle recommends not using the values "public" or "private" for the community string, as these values are well known and present a security risk. See "SNMP v2c Community String" for additional requirements.
Using the library CLI (all libraries except SL150)
Establish a CLI session on the library.
Create an SNMP v2c trap recipient.
> snmp addTrapRecipient trapLevel 1,2,3,4,11,13,14,21,25,27,41,45, 61,63,65,81,85,100 host STA_server_IP version v2c community community_name
Where:
STA_server_IP: IP address of the STA server.
community_name: SNMP v2c trap community string.
For example:
> snmp addTrapRecipient trapLevel 1,2,3,4,11,13,14,21,25,27,41,45,61,63,65,81,85,100 host 192.0.2.20 version v2c community stasnmp
request Id
request Id 2
Device 1,0,0,0
Success true
Done
Failure Count 0
Success Count 1
List the trap recipients to verify that STA has been added correctly.
> snmp listTrapRecipients
requestId
requestId 3
Attributes Community stasnmp
Host 192.0.2.20
Index 1
Port 162
Trap Level 1,2,3,4,11,13,14,21,25,27,41,45, 61,63,65,81,85,100
Version v2c
Object Snmp snmp
Using the SL Console (SL500 libraries only)
Use the SL Console to log in to the library.
From the Tools menu, select System Detail.
In the navigation tree, select Library.
Select the SNMP tab and then the Add Trap Recipients tab.
Complete the screen as follows:
Host: IP address of the STA server.
TrapLevel: Comma-separated list of trap levels the library should send to STA: 1,2,3,4,11,13,14,21,25,27,41,45,61,63,65,81,85,100
Version: Select v2c.
Community – Specify the SNMP v2c trap community string (for example stasnmp).
Click Apply to add the trap recipient.
Using the SL150 user interface
Log in to the library.
In the navigation tree, select Settings.
Select the SNMP tab.
In the SNMP Trap Recipients table, select Add Trap Recipient.
Complete the Add Trap Recipient screen as follows:
Host Address: IP address of the STA server.
Trap Level: Comma-separated list of trap levels the library should send to STA: 1,2,3,4,11,13,14,21,25,27,41,45,61,63,65,81,85,100
Version: Select v2c.
Community Name: Specify the SNMP v2c trap community string (for example, stasnmp).
Click OK to add the trap recipient.
By default, SNMP v2c is disabled on STA. Use this procedure to enable it.
Establish a terminal session with the STA server and log in as the system root user.
Change to the STA configuration files directory.
# cd /Oracle_storage_home/Middleware/user_projects/domains/TBI
Where Oracle_storage_home is the Oracle storage home location defined during STA installation.
Edit the SNMP version properties file.
# vi TbiSnmpVersionSupport.properties
Change the SNMP v2c parameter to true.
V2c=true
Save and exit the file.
Stop and restart all STA processes to activate the change.
# STA stop all # STA start all