Where allowed to run: All environments (*ALL) Threadsafe: No |
Parameters Examples Error messages |
The Change SNMP Attributes (CHGSNMPA) command changes values and options used by the IBM i SNMP agent. The command also is used to specify which SNMP managers receive traps generated by the local system.
The SNMP agent is shipped with the following values for the SNMP attributes.
Restrictions:
Top |
Keyword | Description | Choices | Notes |
---|---|---|---|
SYSD | System description | Character value, *SAME, *NONE, *SYSGEN | Optional |
SYSCONTACT | System contact | Character value, *SAME, *NONE, *CNTINF | Optional |
SYSLOC | System location | Character value, *SAME, *NONE, *CNTINF | Optional |
SNDAUTTRP | Send authentication traps | *SAME, *YES, *NO | Optional |
AUTOSTART | Automatic start | *SAME, *YES, *NO | Optional |
OBJACC | Object access | *SAME, *READ, *WRITE, *NONE | Optional |
LOGSET | Log set requests | *SAME, *YES, *NO | Optional |
LOGGET | Log get requests | *SAME, *YES, *NO | Optional |
LOGTRP | Log traps | *SAME, *YES, *NO | Optional |
TRPMGR | Trap managers | Single values: *SAME, *NONE Other values (up to 300 repetitions): Element list |
Optional |
Element 1: Manager internet address | Character value | ||
Element 2: Manager internet address mask | Character value | ||
Element 3: Community name | Character value | ||
Element 4: Translate community name | *YES, *NO | ||
ALWSNMPV3 | Allow SNMPv3 support | *SAME, *YES, *NO | Optional |
DFTTIMEOUT | Default sub-agent timeout | 1-3600, *SAME, *DFT | Optional |
MAXTIMEOUT | Maximum sub-agent timeout | 1-3600, *SAME, *DFT | Optional |
ALWDUPID | Allow duplicate identifiers | *SAME, *YES, *NO | Optional |
SNMPENGID | SNMP engine identifier | Character value, *SAME, *SYSGEN | Optional |
SNMPENGB | SNMP engine boots | 0-2147483647, *SAME, *DFT | Optional |
Top |
Specifies a textual description of the IBM i. It is suggested that this value should include the full name and version identification of the system's hardware type, software operating system, and/or networking software.
Top |
Specifies the name of the contact person for this IBM i, along with information on how to contact this person. This value is used only by SNMP-specific functions. This value also may be read or modified by an authorized SNMP manager.
Top |
Specifies the physical location of this IBM i. This value is used only by SNMP-specific functions. This value also may be read or modified by an authorized SNMP manager.
Top |
Specifies whether the SNMP agent may send any authenticationFailure traps to any defined SNMP managers. An authenticationFailure trap is sent by the SNMP agent if a request is received from an SNMP manager that contains a community name that is not recognized by the SNMP agent. This trap is only sent when SNDAUTTRP is *YES and when at least one trap manager has been defined. This value may also be read or modified by an authorized SNMP manager.
Top |
Specifies whether the SNMP agent is started when the STRTCP command or STRTCPSVR SERVER(*AUTOSTART) command runs.
Top |
Specifies the default object access for SNMP communities.
Top |
Specifies the default value for whether set requests from SNMP managers in a community are logged in journal QSNMP in library QUSRSYS.
Top |
Specifies the default value for whether get requests and get-next requests from SNMP managers in a community are logged in journal QSNMP in library QUSRSYS.
Top |
Specifies whether traps are logged in journal QSNMP in library QUSRSYS.
Top |
Specifies which SNMP managers receive traps generated by the IBM i SNMP agent.
Element 1: Manager Internet Address
Element 2: IP address mask
Element 3: Community Name
Element 4: Translate Community Name
Top |
Specifies if SNMP version 3 (SNMPv3) support is enabled. The primary goal of SNMPv3 is to define a secure version of the SNMP by protecting the system from common threats such as modification of information, masquerade, disclosure, and message stream modification. SNMPv3 allows the configuration of SNMP users and access control to the managed objects based on the user trying to access them. SNMPv3 also facilitates remote configuration of the SNMP entities, which make remote administration of SNMP entities a much simpler task. In order to configure the list of SNMP users, the CFGTCPSNMP option 3 command can be used. The SNMPD.CONF file located in /QIBM/UserData/OS/SNMP/ is the SNMPv3 configuration file and is where all the users and their associated views are added.
Top |
Specifies the default timeout (in seconds) that this agent waits for a response from a Subagent. This value is used if a timeout value is not specified for the subtree nor for the subagent that exports.
Top |
Specifies the maximum timeout (in seconds) that this agent allows for timeout values for Sub-agents. When you try to set any other timeout value it must be between 1 and this maximum value.
Top |
Specifies if multiple instances of a sub-agent (as identified by the sub-agent Identifier) are allowed. Setting this parameter to the value *NO will prevent (new) duplicate sub-agent identifiers. However, if any duplicates exist when the parameter value is set to *NO, the agent will not remove them, that is considered a manager responsibility. This parameter must be set to *YES in order to allow multiple Distributed Program Interface (DPI) version 1 sub-agents.
Top |
Uniquely identifies the agent within an administrative domain. By default, the engine identifier is created using a vendor-specific formula and incorporates the IP address of the agent. However, any engine identifier that is consistent with the snmpEngineID definition in RFC 3411 and that is also unique within the administrative domain can be specified.
Top |
Specifies the number of times the agent has been restarted since the SNMP engine identifier was last changed.
Top |
Example 1: Changing System Description, System Contact and Automatic Start
CHGSNMPA SYSD('IBM i 7.1 SNMP agent') SYSCONTACT('JOE SMITH, PHONE 555- 1212') AUTOSTART(*NO)
This command changes the system description and system contact information, and specifies that the SNMP agent should not start when the STRTCP command runs. All other values are unchanged.
Example 2: Changing Trap Managers
CHGSNMPA TRPMGR(('9.8.7.6' '255.255.0.0' 'TRAPCOMMUNITY') ('2001:db8::10f' 64 'TRAPCOMMUNITY2'))
This command causes any traps generated by the local System i5 to be sent to SNMP managers that have internet protocol addresses 9.8.7.6 and 2001:db8::10f. Community name TRAPCOMMUNITY is placed in traps sent to 9.8.7.6, and community name TRAPCOMMUNITY2 is placed in traps sent to 2001:db8::10f. For both managers the community name is translated to ASCII characters before being placed in the trap.
Example 3: Enabling SNMPv3, changing the Default and Maximum Sub-agent Timeout, allowing Duplicate Sub-agent IDs, regenerating the SNMP engine ID and reseting the SNMP engine boots value
CHGSNMPA ALWSNMPV3(*YES) DFTTIMEOUT(10) MAXTIMEOUT(3600) ALWDUPID(*YES) SNMPENGID(*SYSGEN) SNMPENGB(0)
This command allows SNMPv3 to be enabled in the system and changes the default subagent timeout to 10 and the maximum sub-agent timeout to 3600. This command also allows multiple instances of sub-agent identifiers, indicates the IBM i agent to generate the SNMP engine and resets the SNMP engine boots count. All other values are unchanged.
Top |
*ESCAPE Messages
Top |