Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
How to configure the net-snmp agent (snmpd.conf) to send traps using TLS and certificates?
Will it reuse the server snmp server cert and use it as a client cert towards the trapd server?
Can you configure a cert per trapsink target?
An example snmpd.conf would help.
An answer to look at the net-snmp snmpd.conf man page would not help. Already did…
Also looked here: http://www.net-snmp.org/wiki/index.php/Using_DTLS#Configuring_Servers
The
trapsesstoken actually follows the same conventions in thesnmpcmdmanual page, which includes TLS/DTLS options. (In fact, internally, it uses the same argument parsing code).So… you actually can replace “snmpget” inall the
snmpgetexamples from the tutorial page you quoted with an appropriatetrapsessdirective and put it in your snmpd.conf file. EG, You can use the “-T our_identity=foo” and “-T their_identity=snmptrapd” types of tokens in thetrapsessline.