snmp

Table of Contents

1. Overview
2. Module Description - What the module does and why it is useful
3. Setup
4. Usage 4.1 Parameters
5. Reference
6. Limitations
7. Development

Overview

Module to configure snmpd server on RedHat 5/6/7, CentOS 5/6/7, Suse 11,12

Module Description

This module allows administrator to configure a basic snmpd server with:

• a Read Only community
• a Read Write community
• Filter Read Only source
• Filter Read Write source
• Filter Read Only view
• Filter Read Write view
• Enable/Disable connection log
• Configure observium's distro script
• Enable/Disable RO and RW access
• Define System location
• Define System administrator

Setup

puppet module vacosta-simple_snmp

Usage

node node.example.com {
        class { 'simple_snmp':
                ro_community => "SecureString",
                ro_source => "192.168.1.0/24",
                rw_community => "VerySecureString",
                rw_source => "192.168.1.2/32",
                rw_enable => true,
                enable_observium_distro => true,
                contact_name => "Victor Acosta",
                contact_mail => "support@example.com"
        }
}

node node.example.com {
        class { 'simple_snmp':
                ro_community => "SecureString",
                ro_source => "192.168.1.0/24",
                rw_enable => false
        }
}

Parameters

#####log_connection Enable or disable connection logs

Default: true #####ro_community Read Only community

Default: "SecureString" #####rw_community Read Write community

Default: "VerySecureString" #####ro_source Read Only source

Default: "0.0.0.0/0" #####rw_source Read Write source

Default: "127.0.0.1/32" #####ro_view Read Only view

Default: ".1" #####rw_view Read Write view

Default: ".1" #####rw_enable Enable or Disable Read Write access

Default: false #####ro_enable Enable or Disable Read Only access

Default: true #####syslocation System location

Default: "A #####contact_name Administrator name

Default: "sysadmin" #####contact_mail Administrator mail

Default: "sysadmin@example.com" #####enable_observium_distro Enable or disable observium's distro script

Default: false #####simple_snmp_enable Enable or disable this module, if false, this module will do nothing

Default: true

Reference

With this definition

node node.example.com {
        class { 'simple_snmp':
                ro_community => "SecureString",
                ro_source => "192.168.1.0/24",
                rw_community => "VerySecureString",
                rw_source => "192.168.1.2/32",
                rw_enable => true,
                enable_observium_distro => true,
                contact_name => "Victor Acosta",
                contact_mail => "support@example.com"
        }
}

The module will configure the /etc/snmp/snmpd.conf as follow:

syslocation A beautiful DataCenter
syscontact Victor Acosta <support@example.com>
rwcommunity VerySecureString 192.168.1.2/32 .1
rocommunity SecureString 192.168.1.0/24 .1
dontLogTCPWrappersConnects true
extend .1.3.6.1.4.1.2021.7890.1 distro /usr/local/bin/distro

Also copies the distro script to the server (only if enable_observium_distro => true), then start and enables the snmpd service

Limitations

Puppet > 4.0 RHEL 5/6/7 CentOS 5/6/7 Suse 11/12

Development

What's next:

• More than one ro_community and rw_community