WISEKUMASearching knowledge on IT and languages

SNMP configuration in Checkpoint Secureplatform   Filed Under: Firewalls and Security

By default Secureplatform doesn’t have allowed SNMP access in the box. To be able to access the snmp OIDs for the firewall follow the next steps:

Enable general SNMP

In this section we will enable the generic SNMP access through port UDP/161 to allow access to the generic OS OIDs.

First of all we will enable the SNMP service in the box with the command snmp service enable.

firewall# snmp service enable
/usr/sbin/snmpmonitor: Server's IP is not defined          [  OK  ]

Next we will need to configure some configuration settings like the trap destination server. The file we will need to edit is under /etc/snmp/snmpd.conf.

The line to add in the configuration file (at the end of the file should be fine) is:

trap2sink {server-IP address} {snmp community name}

For example if our SNMP destination server for collecting traps is 10.1.1.1.

trap2sink 10.1.1.1 random

SNMP user configuration

To display the current configured users use the command snmp user show.

By default it will come configured with the default username of public but we will probably won’t want to have that in the firewall so to add a new username (with no authentication) for snmp use the command.

snmp user add noauthuser {username}

For example:

firewall# snmp user add noauthuser randomguy
snmpmonitor: no process killed                             [  OK  ]

Starting snmpd:                                            [  OK  ]

To configure a username with authentication (used for SNMPv3) use the command.

snmp user add authuser {username} pass {password}

For example:

snmp user add authuser randomguy pass randompass

To configure privacy also with the username:

snmp user add authuser {username} pass {password} priv {privacy password}

For example:

snmp user add authuser randomguy2 pass randompass2 priv randompriv

Finally to delete a username use the command:

snmp user del {username}

For example:

firewall# snmp user del public
snmpmonitor: no process killed                             [  OK  ]

Starting snmpd:                                            [  OK  ]

Enable Checkpoint specific SNMP MIB

To enable access to specific checkpoint OIDs we will need to do the following:

Run the cpconfig command.

Then select the option SNMP extension and answer y to the question.

Once all this is done to access the Checkpoint OIDs use the value (1.3.6.1.4.1.2620.x).

If you want to import the Checkpoint MIBs to your snmp application they are located under the folder $CPDIR/lib/snmp

Tags: checkpoint, secureplatform, snmp