How to use SNMPv3 credential manager for authentication on OpManager

To use SNMPv3 credential manager for authentication on OpManager

OpManager is a network monitoring software that can automatically discover your network, group your devices, services, process status and so on.
Credential Manager allows adding credentials in many formats like telnet, ssh, SNMP and so on.

In our previous session, we have seen the installation of OpManager on centos 7
https://www.linuxhelp.com/how-to-install-opmanager-on-centos-7/ 

Status of OpManager 

[root@linuxhelp bin]# systemctl status OpManager
● OpManager.service - OpManager As Service
   Loaded: loaded (/etc/systemd/system/OpManager.service; enabled; vendor preset: disabled)
   Active: active (exited) since Mon 2018-06-25 09:41:04 IST; 3h 37min ago
  Process: 94539 ExecStart=/opt/ManageEngine/OpManager/bin/na_service start (code=exited, status=0/SUCCESS)
 Main PID: 94539 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/OpManager.service
           ├─94553 ./wrapper ../conf/wrapper.conf wrapper.pidfile=.//OpManager.pid wrapper.daemonize=TRUE
           └─96145 /opt/ManageEngine/OpManager/jre/bin/java -Dcatalina.home=.. -Dserver.home=.. -Dserver.stats=1000 -Djava.util.logging.m...Jun 25 09:41:03 localhost.localdomain systemd[1]: Starting OpManager As Service...
Jun 25 09:41:04 localhost.localdomain systemd[1]: Started OpManager As Service.
Jun 25 09:41:10 localhost.localdomain su[94583]: (to postgres) root on none


Move to your OpManager interface
OpManager_interface

Go to inventory which comprises of the list of devices (By default my localhost gets added soon after installing the OpManager)
device_lists

Click on your device
device_check

Go to edit device details and add the vendor details, category, type.
device_details

Now click on settings and go to discovery in that select credentials tab and finally click Add credentials
settings
add_creds

Select SNMPv3 ( which is secured one compared to SNMPv1/v2)
select_snmpv3

The values need to be added after configuring SNMP on the client side
client_side
For that installs SNMP and its required packages on a client machine

[root@linuxhelp ~]# yum install net-snmp net-snmp-utils net-snmp-devel -y
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
 * base: centos-hcm.viettelidc.com.vn
 * extras: mirrors.fibergrid.in
 * updates: mirrors.fibergrid.in
Resolving Dependencies
--> Running transaction check
---> Package net-snmp.x86_64 1:5.7.2-33.el7_5.2 will be installed
--> Processing Dependency: net-snmp-libs = 1:5.7.2-33.el7_5.2 for package: 1:net-snmp-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: net-snmp-agent-libs = 1:5.7.2-33.el7_5.2 for package: 1:net-snmp-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: libnetsnmptrapd.so.31()(64bit) for package: 1:net-snmp-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: libnetsnmpmibs.so.31()(64bit) for package: 1:net-snmp-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: libnetsnmpagent.so.31()(64bit) for package: 1:net-snmp-5.7.2-33.el7_5.2.x86_64
---> Package net-snmp-devel.x86_64 1:5.7.2-33.el7_5.2 will be installed
--> Processing Dependency: tcp_wrappers-devel for package: 1:net-snmp-devel-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: rpm-devel for package: 1:net-snmp-devel-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: perl-devel(x86-64) for package: 1:net-snmp-devel-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: openssl-devel for package: 1:net-snmp-devel-5.7.2-33.el7_5.2.x86_64
--> Processing Dependency: lm_sensors-devel for package: 1:net-snmp-devel-5.7.2-33.el7_5.2.x86_64
.
.
.
.
Dependency Updated:
  e2fsprogs.x86_64 0:1.42.9-12.el7_5     e2fsprogs-libs.x86_64 0:1.42.9-12.el7_5  elfutils.x86_64 0:0.170-4.el7          elfutils-libelf.x86_64 0:0.170-4.el7  elfutils-libs.x86_64 0:0.170-4.el7       glibc.x86_64 0:2.17-222.el7
  glibc-common.x86_64 0:2.17-222.el7     krb5-libs.x86_64 0:1.15.1-19.el7         libcom_err.x86_64 0:1.42.9-12.el7_5    libdb.x86_64 0:5.3.21-24.el7          libdb-utils.x86_64 0:5.3.21-24.el7       libselinux.x86_64 0:2.5-12.el7
  libselinux-python.x86_64 0:2.5-12.el7  libselinux-utils.x86_64 0:2.5-12.el7     libsepol.x86_64 0:2.5-8.1.el7          libss.x86_64 0:1.42.9-12.el7_5        net-snmp-libs.x86_64 1:5.7.2-33.el7_5.2  openssl.x86_64 1:1.0.2k-12.el7
  openssl-libs.x86_64 1:1.0.2k-12.el7    rpm.x86_64 0:4.11.3-32.el7               rpm-build-libs.x86_64 0:4.11.3-32.el7  rpm-libs.x86_64 0:4.11.3-32.el7       rpm-python.x86_64 0:4.11.3-32.el7

Complete!

Now check the status of snmpd

[root@linuxhelp ~]# systemctl status snmpd
● snmpd.service - Simple Network Management Protocol (SNMP) Daemon.
   Loaded: loaded (/usr/lib/systemd/system/snmpd.service; disabled; vendor preset: disabled)
   Active: inactive (dead)
Now there are 3 types to configure snmpv3
•    Command Line
•    Interactive
•    Manual

select any one of the methods and create SNMPv3 user, here command line mode is used, Backup the old configuration file before creating a user.

[root@linuxhelp ~]#   mv /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.old

Use the following to create

[root@linuxhelp ~]# net-snmp-config --create-snmpv3-user -A Net@123 -X alerts -a SHA -x AES alert@123
adding the following line to /var/lib/net-snmp/snmpd.conf:
   createUser alert@123 SHA "Net@123" AES alerts
adding the following line to /etc/snmp/snmpd.conf:
   rwuser alert@123

Now move to your OpManager under settings, go to credentials tab and “Add credential”
add_credentialsadd_creds
creds_page
updated_Settings

We have successfully added credentials, before associating it start and enable the snmpd service

[root@linuxhelp ~]# systemctl start snmpd
[root@linuxhelp ~]# systemctl enable snmpd
Created symlink from /etc/systemd/system/multi-user.target.wants/snmpd.service to /usr/lib/systemd/system/snmpd.service.


Under settings, we have basic settings configuration comprising of mail settings, credentials etc.
basic_config

The added device is displayed in “Inventory”
associate_creds
associate_crdentails

Edit credentials (telnet,ssh,net-snmp)
edit_creds
creds_editing

In that “Click here to change password” there choose SNMP credentials and apply them globally
change_password

Now click Monitor icon
click_monitor_icon

Comprises of Script,service,URL,Process monitors
script_compromise

For Adding Process Monitor,
add_process_monitorprocess_monitoringOpmanager

Similarly for Service monitors
serice_monitor
sucessfully_associated

For Performance monitor
performance_monitor
localhost

With this, the method to use SNMPv3 credential manager for authentication on OpManager comes to an end.


Thank you! for using Linux Help.

You find this tutorial helpful? Share with your friends to keep it alive.
For more help topics browse our website www.linuxhelp.com
Be the first to comment, we value your suggestions. For further queries please comment below.

Tags: SNMP
user image Author :  Caden