Specifying main SNMP settings by using the web UI

Enable SNMP and specify main connection and security details.

About this task

You can use the IBM® MQ Appliance web UI to configure SNMP. You use the Main section of the interface to specify basic details and to enable the service.

Procedure

  1. Start the IBM MQ Appliance web UI and click the Administration icon shows the administration icon.
  2. Select Access > SNMP Settings.
  3. Ensure that Administrative state is turned On (this step enables SNMP).
  4. Specify the IP address of the local interface on which the SNMP service listens for SNMP requests in the Local IP Address field. Specify 0.0.0.0 (which is the default value) to listen on all appliance interfaces.
  5. Specify the port that is listened on in the Local Port field. The port for SNMP is 161 by default.
  6. If you are configuring SNMP v1 or v2c, specify a community. The v1 and v2c versions of SNMP rely on a password phrase that is known as a "community" . The name of the community accompanies SNMP requests, and is used to determine whether the request can be fulfilled or not.
    1. Click Add to open the SNMPv1/v2c Communities tab.
    2. Specify the name of the community in the Community field.
    3. Select the type of access that SNMP managers using this community name have to the appliance from the Mode list.
    4. Specify the IP address of the SNMP manager for the appliance in the Remote Host Address field. Set the address to 0.0.0.0/0 to allow access to all SNMP managers that use the community name.
    5. Click Apply to add the community. You can add multiple communities, if required.
  7. If you are configuring SNMP v3, complete the following steps:
    1. If required by the chosen security level, add one or more local users who have SNMPv3 credentials:
      • If you have already configured a local user and specified SNMPv3 credentials, select the user from the SNMPv3 Users list and click Add. Repeat this step to add additional users.
      • If you have already configured a local user, but not yet specified their specified SNMPv3 credentials, select the user from the SNMPv3 Users list and click the pencil icon shows the pencil icon to edit the user definition. Add the required credentials and click Apply.
      • Otherwise, click the plus icon shows the plus icon to open the User Account dialog. Create a new user and specify SNMPv3 credentials. Click Apply.
      See Configuring local users by using the web UI .
    2. Select the SNMPv3 security level. Choose one of the following options:
      Authentication, Privacy
      The SNMP connection requires authentication of users and encryption of data. This setting is the default.
      Authentication, No Privacy
      The SNMP connection requires authentication of users but not the encryption of data.
      No Authentication, No privacy
      The SNMP connection requires neither authentication of users nor encryption of data.
    3. Select the SNMPv3 access level. You should select the read-only option, which allows an SNMP manager to request get, get-next, and get-bulk operations. The read-only option is the default. (All of the objects that are exposed through the IBM MQ Appliance MIBs are read only.)
  8. If you enable default trap events (see Configuring default trap events by using the web UI), you should also define a target to send them to. The information that you supply when you configure a target depends on the version of SNMP that you are using. SNMPv1 and v2c require different setup information to SNMP v3.
    1. In the Trap and Notification Targets section, click Add to open the Trap and Notification Targets tab.
    2. Specify the IP address of the target recipient of traps/notifications in the Remote Host Address field.
    3. Specify the port to use when sending traps/notifications in the Remote Port field. SNMP uses port 162 by default.
    4. Select the version of SNMP you are using from the Version list.
      • If you select version 1 or 2c, specify the name of the community to use when sending trap events in the Community field.
      • If you select version 3, specify the name of the SNMP user used to send event notifications in the Security Name field, and select the security level from the Security Level list to specify whether the user is authenticated and data is encrypted.
    5. When you have configured your targets, click Apply.

What to do next

If you want to view the MIBs that control how SNMP managers work with the appliance, open the Enterprise MIBs section of the dialog, or open the Trap Event Subscriptions section to configure default traps/notifications. Otherwise, if you have completed your SNMP configuration, click Apply.