Re: Disable or remove SNMPv1/2c authentication. Use SNMP version 3 authentication only (763 Views)
Reply
Super Advisor
MikeL_4
Posts: 958
Registered: ‎05-05-2002
Message 1 of 2 (811 Views)

Disable or remove SNMPv1/2c authentication. Use SNMP version 3 authentication only

Our applications team ran a Vulnerability scan on some of there servers, and a recommendation was to:

 

  Disable or remove SNMPv1/2c authentication. Use SNMP version 3 authentication

 

Can someone tell me how I can do this ???

 

 => ps -ef |grep -i snmp | grep -v grep
    root  4529     1  0  Dec 10  ?         7:08 /usr/sbin/snmpdm
    root  4573     1  0  Dec 10  ?         2:49 /usr/lbin/cmsnmpd
=>

 

=> find / -name snmp*.conf
/etc/SnmpAgent.d/snmpd.conf
/etc/snmpd.conf
=>

 

 

Honored Contributor
Matti_Kurkela
Posts: 6,271
Registered: ‎12-02-2001
Message 2 of 2 (763 Views)

Re: Disable or remove SNMPv1/2c authentication. Use SNMP version 3 authentication only

The HP-UX standard SNMP agent does not support SNMP version 3.

 

You should evaluate whether or not you need SNMP at all in your environment.

If you don't need it, disable it.

 

If you need SNMP, you will need to install Net-SNMP as a replacement for the standard SNMP agent, and configure it to accept SNMPv3 only. It is available for free from HP in the Internet Express kit:

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1131

 

 

MK
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.