Differences

This shows you the differences between two versions of the page.

--- admin-snmp [2024/08/25 02:33] – -Introduce MIB concept hogwild
+++ admin-snmp [2024/10/21 20:16] (current) – -Clarify risks of enabling Remote Acess hogwild
@@ Line 1: / Line 1: @@
 ====== SNMP ======
-This menu allows you to configure Simple Network Management Protocol settings in FreshTomato.
+In this menu you can configure Simple Network Management Protocol settings.
-SNMP is a simple protocol used for network monitoring. It collects and organizes information about managed devices on TCP/IP networks, and allows you to modify that information to change device behavior.
+ \\ The Simple Network Management Protocol is used for network monitoring and management. It allows you to collect and organize information about devices on IP networks, and can even allow you to modify that information to change device behavior.
+SNMP has a simple client-server architecture. In SNMP:
  \\
-{{::admin-snmp.png?686}}
+  * Servers (called "Managers") collect and process information about \\ network devices. Typically, the manager software runs on a PC or server.
+  * Clients are called "Agents". Agents run on any device that supports them \\ that are connected to a IP network. This includes computers, network gear, \\ and many other device types, such as phones, \\ IoT devices, and more.
+  * FreshTomato acts as a sort of connector between the Manager and \\ the Agents.
  \\
-SNMP has a simple client-server architecture. In SNMP, servers (called "managers") collect and process information about network devices.
+SNMP lets one or more Managers collect management data from various clients via a regular polling process. It exposes the data in the form of variables in a database, called the Management Information Base (MIB). The MIB describes the system status and configuration of each device. MIB variables can then be remotely queried (and even manipulated) by Manager applications. \\  \\
+{{::admin-snmp.png?633}}
+ \\
+\\ **Enable SNMP**: enables the SNMP service, and allows a Manager program to start polling for data.
+ \\
+**Port: **the port number on which the manager polls data from monitored agent devices. (Default: 161).
+ \\
+**Remote Access: **inserts a firewall rule to expose a UDP port (of above number) to the WAN interface.
+//Enabling this makes SNMP a non-secure protocol//. Theoretically, any device that can "speak" SNMP could query SNMP devices or access Manager data. Thus, for security, you are strongly urged to enter a setting in the //Allowed Remote IP Address// field described below and add an //RO Community string//.
+ \\
+**Allowed Remote IP Address: **the IP address of the PC or other device allowed Remote Access.
+ \\
+**Location:** an optional field for the physical location of the Server.
+(Default: hostname in [[basic-ident|Identification]] menu).
+ \\
+**Contact: **an optional field for contact information for a person to alert.
+FreshTomato does not have an built-in email server.
+ \\
+**RO Community: **the Read-Only Community string.
+This string is used to authenticate the devices allowed to query SNMP data from an agent. You are strongly advised to change the default setting for better security. (Default: Public").
+ \\
-In SNMP, the clients, (called "agents"), are any type of device or component connected to the network. That can include computers, but also other network equipment, phones, IoT devices, and more.
+Currently, FreshTomato's SNMP feature does not support a RW (Read-Write) community or traps.
-SNMP collects management data from the various clients and exposes it in the form of variables in a Management Information Base (MIB). The MIB describes the system status and configuration of each device. MIB variables can then be remotely queried (and sometimes manipulated) by managing applications.
+ \\ \\

FreshTomato Wiki

User Tools

Site Tools

Differences

Page Tools