Data Domain: Managing SNMP

You can also view this video on YouTube.

Viewing SNMP Status and Configuration:

The SNMP tab displays the current SNMP status and configuration. The SNMP view shows the SNMP status, SNMP properties, SNMP V3 configuration, and SNMP V2C configuration.

Steps for enabling or disabling SNMP

1. Select Administration > Settings > SNMP.
2. In the Status area, click Enable or Disable.

Downloading the SNMP MIB

Use the SNMP tab to download the SNMP MIB.

1. Select Administration > Settings > SNMP.
2. Click Download the MIB file.
3. In the Opening .mib dialog box, select Open.
4. Click Browse and select a browser to view the MIB in a browser window.

5. Save the MIB or exit the browser.

Configuring SNMP Properties

Use the SNMP tab to configure the text entries for system location and system contact.
Steps to configure entries:

1. Select Administration > Settings > SNMP.
2. In the SNMP Properties area, click Configure. The SNMP Configuration dialog box appears.
3. In the text fields, specify the following information; and or an

• SNMP System Location is a description of where the protection system is located.

• SNMP System Contact: The email address of the system administrator
• SNMP System Notes: (Optional) More SNMP configuration information
• SNMP Engine ID: A unique identifier for the SNMP entity where the following requirements and guidelines apply:
  • The engine ID must be 34 hexadecimal characters (SNMP V3 only)
  • Use a value meaningful to the installation
  • For HA pairs, the engine ID can only be changed from the active node, and is the same for all nodes

4. Click OK.

SNMP V3 User Management

Use the SNMP tab to create, modify, and delete SNMP V3 users and trap hosts. When you create SNMP V3 users, you define a username, specify either read-only or read/write access, and select an authentication protocol.

Creating SNMP V3 Users:

1. Select Administration > Settings > SNMP.
2. In the SNMP Users area, click Create. The Create SNMP User dialog box appears.
3. In the Name text field, enter the name of the user for whom you want to grant access to the system agent. The name must be a minimum of eight characters.
4. Select either read-only or read/write access for this user.
5. To authenticate the user, select Authentication.
   1. Select the MD5, SHA1, or SHA256 protocol.
   2. Enter the authentication key in the Key text field. (Do not start key with the leading "#" character)
   3. To provide encryption to the authentication session, select Privacy.
   4. Select either the AES or DES protocol.
   5. Enter the encryption key in the Key text field. (Do not start key with the leading "#" character)
6. Click OK. The newly added user account appears in the SNMP Users table.

Modifying SNMP V3 Users
Review Data Domain: SNMP v3 Trap does not immediately reflect a user authentication or privacy change for limitations on user credential changes.

Use the SNMP tab to modify the access level (read-only or read/write) and the authentication protocol for existing SNMP V3 users is available.

1. Select Administration > Settings > SNMP.
2. In the SNMP Users area, select a checkbox for the user and click Modify. The Modify SNMP User dialog box appears. Add or change any of the following settings.
3. Select either read-only or read/write access for this user.
4. To authenticate the user, select Authentication.
   1. Select the MD5, SHA1, or SHA256 protocol.
   2. Enter the authentication key in the Key text field. (Do not start key with the leading "#" character)
   3. To provide encryption to the authentication session, select Privacy.
   4. Select either the AES or DES protocol.
   5. Enter the encryption key in the Key text field. (Do not start key with the leading "#" character)
5. Click OK. The new settings for this user account appear in the SNMP Users table.

Removing SNMP V3 Users
Use the SNMP tab to delete existing SNMP V3 users.

1. Select Administration > Settings > SNMP.
2. In the SNMP Users area, select a checkbox for the user and click Delete. The Delete SNMP User dialog box appears.

 

3. Verify the username to be deleted and click OK.
4. In the Delete SNMP User Status dialog box, click Close. The user account is removed from the SNMP Users table.

SNMP V2C Community Management

Define SNMP V2C communities (which serve as passwords) to control management system access to the protection system. To restrict access to specific hosts that use the specified community, assign the hosts to the community.
 

Creating SNMP V2C Communities
Create communities to restrict access to the DDR system or for use in sending traps to a trap host. You must create a community and assign it to a host before you can select that community for use with the trap host.

1. Select Administration > Settings > SNMP.
2. In the Communities area, click Create. The Create SNMP V2C Community dialog box appears.
3. In the Community box, enter the name of a community for whom you want to grant access to the system agent.
4. Select either read-only or read/write access for this community.
5. If you want to associate the community to one or more hosts, add the hosts as follows:
   1. Click (+) to add a host. The host dialog box appears.
   2. In the Host text field, enter the IP address or domain name of the host.
   3. Click OK. The host is added to the host list.

6. Click OK. The new community entry appears in the Communities table and lists the selected hosts

Modifying SNMP V2C Communities

1. Select Administration > Settings > SNMP.
2. In the Communities area, select the checkbox for the community and click Modify. The Modify SNMP V2C Community dialog box appears.
3. To change the access mode for this community, select either read-only or read/write access.

4. To add one or more hosts to this community, do the following:
   1. Click (+) to add a host. The Host dialog box appears.
   2. In the Host text field, enter the IP address or domain name of the host.
   3. Click OK. The Host is added to the host list.
5. To delete one or more hosts from the host list, do the following but review the information first.

 

6. To edit a hostname, do the following:
   1. Select the checkbox for the host.
   2. Click the edit button (pencil).
   3. Edit the hostname.
   4. Click OK.
7. Click OK. The modified community entry appears in the Communities table.

Deleting SNMP V2C Communities
Use the SNMP tab to delete existing SNMP V2 communities.

1. Select Administration > Settings > SNMP.
2. In the Communities area, select a checkbox for the community and click Delete. The Delete SNMP V2C Communities dialog box appears.

 

3. Verify the community name to be deleted and click OK.
4. In the Delete SNMP V2C Communities Status dialog box, click Close. The community entry is removed from the Communities table.

SNMP Trap Host Management

Trap host definitions enable protection systems to send alert messages in SNMP trap messages to an SNMP management station. Creating SNMP V3 and V2C trap hosts definitions identify remote hosts that receive SNMP trap messages from the system.

Prerequisites:
If you plan to assign an existing SNMP V2C community to a trap host, you must first use the Communities area to assign the trap host to the community.

Creating SNMP V3 and V2C Trap Hosts

1. Select Administration > Settings > SNMP.
2. In the SNMP V3 Trap Hosts or SNMP V2C Trap Hosts area, click Create. The Create SNMP Trap Hosts dialog appears.
3. In the Host box, enter the IP address or domain name of the SNMP Host to receive traps.
4. In the Port box, enter the port number for sending traps (port 162 is a common port).
5. Select the user (SNMP V3) or the community (SNMP V2C) from the drop-down menu.

 

6. To create a new community:
   1. Select Create New Community in the Community drop-down menu.
   2. Enter the name for the new community in the Community box.
   3. Select the Access type.
   4. Click the add (+) button.
   5. Enter the trap hostname.
   6. Click OK.
   7. Click OK.
7. Click OK.

Modifying SNMP V3 and V2C Trap Hosts
You can modify the port number and community selection for existing trap host configurations.

1. Select Administration > Settings > SNMP.
2. In the SNMP V3 Trap Hosts or SNMP V2C Trap Hosts area, select a Trap Host entry, and click Modify. The Modify SNMP Trap Hosts dialog box appears.
3. To modify the port number, enter a new port number in the Port box (port 162 is a common port).
4. Select the user (SNMP V3) or the community (SNMP V2C) from the drop-down menu.

 

5. To create a new community:
   1. Select Create New Community in the Community drop-down menu.
   2. Enter the name for the new community in the Community box.
   3. Select the Access type.
   4. Click the add (+) button.
   5. Enter the trap hostname.
   6. Click OK.
   7. Click OK.
6. Click OK.

Removing SNMP V3 and V2C Trap Hosts
Use the SNMP tab to delete existing trap host configurations.

1. Select Administration > Settings > SNMP.
2. In the Trap Hosts area (either for V3 or V2C), select a checkbox for the trap host and click Delete. The Delete SNMP Trap Hosts dialog box appears.
3. Verify the hostname to be deleted and click OK.
4. In the Delete SNMP Trap Hosts status dialog box, click Close. The trap host entry is removed from the Trap Hosts table.

Further notes:
The SNMP is a standard protocol for exchanging network management information, and is a part of the TCP/IP protocol suite. SNMP provides a tool for network administrators to manage and monitor network-attached devices, such as Data Domain systems, for conditions that warrant administrator attention.

To monitor systems using SNMP, install the DDOS MIB in your SNMP Management system. DDOS also supports the standard MIB-II so you can query MIB-II statistics for general data such as network statistics. For full coverage of available data, use both the DDOS MIB and the standard MIB-II.

The DDOS system SNMP agent accepts queries for system-specific information from management systems using SNMP V1, V2C, and V3. SNMP V3 provides a greater degree of security than V2C and V1 by replacing cleartext community strings (used for authentication) with user-based authentication using either MD5, SHA1, or SHA256. SNMP V3 use

See the Dell DDOS 7.9 MIB Quick Reference for complete details. (log in to Dell Support is required to view this document)

NetWorker: 

• SNMP V3 is not supported in the latest networker version 19.7 as stated in the Dell NetWorker 19.7 Security Configuration Guide.

Related articles:

• Port requirements for allowing access to a Data Domain through a Firewall
• Data Domain: Common SNMP configuration and Issues causing Monitoring Services disabled in Integrated Backup Software or DPA
• Data Domain: Importance of keeping SNMP trap disabled
• Data domain: SNMP Frequently Asked Questions (FAQ) and How to download MIB files
• Data Domain: SNMP server fail to return queries to client
• Data Domain SNMP status request consistently fails with timeout errors
• NetWorker: SNMP V3 for Data Domain SNMP Monitoring
• Data Domain: SNMP V3 Trap does not immediately reflect a user authentication or privacy change
• Data Domain: Default SNMP community names are identified by security scanners (CVE-1999-0517)
• Data Domain - System hardening and best practices guide