Change SNMP Attributes (CHGSNMPA)
Where allowed to run: All environments (*ALL) Threadsafe: No |
Parameters Examples Error messages |
The Change SNMP Attributes (CHGSNMPA) command changes values and options used by the IBM i SNMP agent. The command also is used to specify which SNMP managers receive traps generated by the local system.
The SNMP agent is shipped with the following values for the SNMP attributes.
- Keyword
- Value
- SYSD
- *SYSGEN
- SYSCONTACT
- *NONE
- SYSLOC
- *NONE
- SNDAUTTRP
- *YES
- AUTOSTART
- *NO
- OBJACC
- *READ
- LOGSET
- *NO
- LOGGET
- *NO
- LOGTRP
- *NO
- TRPMGR
- *NONE
- LCLTRPMGR
- *NO for the Start local trap manager element and *NO for the Forward traps element.
- ALWSNMPV3
- *NO
- DFTTIMEOUT
- *DFT
- MAXTIMEOUT
- *DFT
- ALWDUPID
- *YES
- SNMPENGID
- *SYSGEN
- SNMPENGB
- *DFT
- BLKSIZE
- 1024 for disk units. For storage pools, the size is determined by the system.
- ADLINF
- *DFT
Restrictions:
- You must have input/output system configuration (*IOSYSCFG) special authority to use this command.
Top |
Parameters
Keyword | Description | Choices | Notes |
---|---|---|---|
SYSD | System description | Character value, *SAME, *NONE, *SYSGEN | Optional |
SYSCONTACT | System contact | Character value, *SAME, *NONE, *CNTINF | Optional |
SYSLOC | System location | Character value, *SAME, *NONE, *CNTINF | Optional |
SNDAUTTRP | Send authentication traps | *SAME, *YES, *NO | Optional |
AUTOSTART | Automatic start | *SAME, *YES, *NO | Optional |
OBJACC | Object access | *SAME, *READ, *WRITE, *NONE | Optional |
LOGSET | Log set requests | *SAME, *YES, *NO | Optional |
LOGGET | Log get requests | *SAME, *YES, *NO | Optional |
LOGTRP | Log traps | *SAME, *YES, *NO | Optional |
TRPMGR | Trap managers | Single values: *SAME, *NONE Other values (up to 300 repetitions): Element list |
Optional |
Element 1: Manager internet address | Character value | ||
Element 2: Manager internet address mask | Character value | ||
Element 3: Community or user name | Character value | ||
Element 4: Translate community name | *YES, *NO | ||
Element 5: Message type | *TRAPV1, *TRAPV3, *INFORMV3 | ||
LCLTRPMGR | Local trap manager | Single values: *SAME Other values: Element list |
Optional |
Element 1: Start local trap manager | *YES, *NO | ||
Element 2: Forward traps | *YES, *NO | ||
Element 3: User name | Character value, *NONE | ||
Element 4: Inform IP address | Character value, *NONE | ||
ALWSNMPV3 | Allow SNMPv3 support | *SAME, *YES, *NO, *V3ONLY | Optional |
DFTTIMEOUT | Default sub-agent timeout | 1-3600, *SAME, *DFT | Optional |
MAXTIMEOUT | Maximum sub-agent timeout | 1-3600, *SAME, *DFT | Optional |
ALWDUPID | Allow duplicate identifiers | *SAME, *YES, *NO | Optional |
SNMPENGID | SNMP engine identifier | Character value, *SAME, *SYSGEN | Optional |
SNMPENGB | SNMP engine boots | 0-2147483647, *SAME, *DFT | Optional |
BLKSIZE | Block size | Single values: *SAME Other values: Element list |
Optional |
Element 1: Storage pool | *DFT, 4K, 8K, 16K, 32K, 64K, 128K, 256K, 512K, 1M, 4096, 8192, 16384, 32768, 65536, 131072, 262144, 524288, 1048576 | ||
Element 2: Disk unit | *DFT, 1024, 2048, 4096, 8192, 16384, 32768 | ||
ADLINF | Additional information | Single values: *SAME, *DFT Other values (up to 2 repetitions): *ASPNBR, *SYSD |
Optional |
Top |
System description (SYSD)
Specifies a textual description of the IBM i. If the Additional information (ADLINF) parameter of this command specifies *SYSD, the specified text is added to the end of the system generated text. The system description is also known by SNMP managers and agents as sysDescr.
- *SAME
- The value does not change.
- *SYSGEN
- The system generated text is returned for the sysDescr value for a get, get-bulk, or get-next request. No additional information is returned when ADLINF(*SYSGEN) is specified.
- *NONE
- The system generated text is returned for the sysDescr value for a get, get-bulk, or get-next request. No additional information is returned when ADLINF(*SYSGEN) is specified.
- system-description
- Specify the text that is added to the end of the system generated text returned for the sysDescr value for a get, get-bulk, or get-next request. This text is only added to the system generated text when ADLINF(*SYSD) is also specified. If ADLINF does not specify *SYSD, only the system generated text is returned for the sysDescr value for a get, get-bulk, or get-next request.
Top |
System contact (SYSCONTACT)
Specifies the name of the contact person for this IBM i, along with information on how to contact this person. This value is used only by SNMP-specific functions. This value also may be read or modified by an authorized SNMP manager.
- *SAME
- The value does not change.
- *NONE
- No system contact exists.
- *CNTINF
- The value is obtained from the service contact information specified by using the Work with Contact Information (WRKCNTINF) command. The value obtained consists of the contact person and the contact telephone numbers.
- system-contact
- Specify the name of the contact person and other contact information.
Top |
System location (SYSLOC)
Specifies the physical location of this IBM i. This value is used only by SNMP-specific functions. This value also may be read or modified by an authorized SNMP manager.
- *SAME
- The value does not change.
- *NONE
- No system location information exists.
- *CNTINF
- The value is obtained from the service contact information specified by using the Work with Contact Information (WRKCNTINF) command. The value obtained consists of the mailing address.
- system-location
- Specify the physical location of the system.
Top |
Send authentication traps (SNDAUTTRP)
Specifies whether the SNMP agent may send any authenticationFailure traps to any defined SNMP managers. An authenticationFailure trap is sent by the SNMP agent if a request is received from an SNMP manager that contains a community name that is not recognized by the SNMP agent. This trap is only sent when SNDAUTTRP is *YES and when at least one trap manager has been defined. This value may also be read or modified by an authorized SNMP manager.
- *SAME
- The value does not change.
- *YES
- authenticationFailure traps may be sent.
- *NO
- authenticationFailure traps are not sent.
Top |
Automatic start (AUTOSTART)
Specifies whether the SNMP agent is started when the STRTCP command or STRTCPSVR SERVER(*AUTOSTART) command runs.
- *SAME
- The value does not change.
- *YES
- The SNMP agent is started when the STRTCP command or STRTCPSVR SERVER(*AUTOSTART) command runs.
- *NO
- The SNMP agent is not started when the STRTCP command runs.
Top |
Object access (OBJACC)
Specifies the default object access for SNMP communities.
- *SAME
- The value does not change.
- *READ
- Allow SNMP managers that are part of a community to read all management information base (MIB) objects. Modification of MIB objects by SNMP managers is not permitted.
- *WRITE
- Allow SNMP managers that are part of a community to modify all MIB objects that can be modified. Specifying *WRITE implies *READ access.
- *NONE
- Do not allow SNMP managers that are part of a community to modify any MIB objects.
Top |
Log set requests (LOGSET)
Specifies the default value for whether set requests from SNMP managers are logged in journal QSNMP in library QUSRSYS.
- *SAME
- The value does not change.
- *YES
- Set requests are logged.
- *NO
- Set requests are not logged.
Top |
Log get requests (LOGGET)
Specifies the default value for whether get, get-bulk, and get-next requests from SNMP managers are logged in journal QSNMP in library QUSRSYS. The value specified for this paramater also determines whether SNMPv3 engine identifier discovery requests are logged.
- *SAME
- The value does not change.
- *YES
- Get, get-bulk, and get-next requests are logged. SNMPv3 engine identifier discovery packets are logged.
- *NO
- Get, get-bulk, and get-next requests are not logged. SNMPv3 engine identifier discovery packets are not logged.
Top |
Log traps (LOGTRP)
Specifies whether trap and inform messages are logged in journal QSNMP in library QUSRSYS.
- *SAME
- The value does not change.
- *YES
- Trap and inform messages are logged.
- *NO
- Trap and inform messages are not logged.
Top |
Trap managers (TRPMGR)
Specifies which SNMP managers receive trap and inform messages generated by the IBM i SNMP agent.
- *SAME
- The value does not change.
- *NONE
- No trap or inform messages are sent by the IBM i SNMP agent.
Element 1: Manager internet address
- manager-internet-address
- Specify the internet address of the SNMP manager. The internet address may be an IPv4 or IPv6 address. An IPv4 internet address is specified in the form nnn.nnn.nnn.nnn, where nnn is a decimal number ranging from 0 through 255. An IPv4 internet address is not valid if it has a value of all binary ones or all binary zeros for the network identifier (ID) portion or the host ID portion of the address. An IPv6 internet address is specified in the form x:x:x:x:x:x:x:x, where x is a hexadecimal number ranging from 0 through X'FFFF'. "::" may be used once in the IPv6 address to indicate one or more groups of 16 bits of zeros. The "::" may be used to compress leading, imbedded, or trailing zeros in the address. This address is independent of the manager internet address specified on the ADDCOMSNMP and CHGCOMSNMP commands.
Element 2: Manager internet address mask
- manager-internet-address-mask
- If the associated manager address is an IPv6 address, then the internet address mask is either an IPv6 address mask (for example, FFFF:FFFF::) or an integer from 0 to 128 specifying the number of IPv6 address prefix bits used to construct an IPv6 address mask. If the manager internet address is an IPv4 address, then internet address mask is either an IPv4 address mask (for example, 255.255.255.0) or an integer from 0 to 32 specifying the number of IPv4 address prefix bits used to construct an IPv4 address mask.
Element 3: Community or user name
- community-or-user-name
- Specify the SNMP community name or SNMP version 3 (SNMPv3) user name to be used when sending a trap or inform message to this SNMP manager. The community name specified does not have to exist on the system. The name may contain characters that cannot be displayed. However, if an SNMPv3 user name is specified, it must exist on the system. Use the Configure TCP/IP SNMP (CFGTCPSNMP) command to add, change, and remove communities or users.
Element 4: Translate community name
- *YES
- The community or user name is translated to ASCII characters when a trap or inform message is sent to the SNMP manager. This value should be specified when the name consists entirely of characters that can be displayed. An error message is sent if the name cannot be translated to ASCII characters.
- *NO
- The community name is not translated to ASCII characters when a trap is sent to the SNMP manager. This value should be specified when the community name contains one or more characters that cannot be displayed. This does not apply to an SNMPv3 user name because they are always translated to ASCII.
Element 5: Message type
- *TRAPV1
- An SNMPv1 trap message is sent to the SNMP manager.
- *TRAPV3
- An SNMPv3 trap message is sent to the SNMP manager.
- *INFORMV3
- An SNMPv3 inform message is sent to the SNMP manager.
Top |
Local trap manager (LCLTRPMGR)
Specifies which SNMP managers receive trap and inform messages generated by the IBM i SNMP agent.
- *SAME
- The value does not change.
Element 1: Start local trap manager
- *NO
- The local trap manager is not started when the SNMP server is started. The Start Trap Manager (STRTRPMGR) command must be used to start the local trap manager. The local trap manager is not ended when the SNMP server is ended. The End Trap Manager (ENDTRPMGR) command must be used to end the local trap manager.
- *YES
- The local trap manager is started when the SNMP server is started and ended when the SNMP server is ended.
Element 2: Forward traps
- *NO
- The local trap manager does not forward any trap or inform messages that it receives.
- *YES
- The local trap manager forwards trap and inform messages that it receives. If an SNMPv1 trap is received, the trap will be forwarded to all trap managers that are configured to receive SNMPv1 traps (TRPMGR parameter). If an SNMPv3 trap is received, the trap will be forwarded to all trap managers that are configured to receive SNMPv3 traps (TRPMGR parameter). If an inform message is received, the inform message will only be forwarded to the inform manager specified by the Inform IP address and User name elements of this parameter. In addition, SNMPv3 trap and inform messages will only be forwarded if the configured SNMPv3 user specifies at least the same authority level as the message that was received.
Element 3: User name
- *NONE
- An SNMPv3 user is not specified. Inform messages will not be forwarded.
- User-name-for-inform
- Specify the SNMPv3 user name to used for forwarding inform messages. The specified user must exist on the system in order to send the inform message, and it must specify at least the same authority level as the inform message that was received.
Element 4: Inform IP address
- *NONE
- An IP address for inform messages is not specified. Inform messages will not be forwarded.
- IP-address-for-inform
- Specify the internet address of the SNMP manager. The internet address may be an IPv4 or IPv6 address. An IPv4 internet address is specified in the form nnn.nnn.nnn.nnn, where nnn is a decimal number ranging from 0 through 255. An IPv4 internet address is not valid if it has a value of all binary ones or all binary zeros for the network identifier (ID) portion or the host ID portion of the address. An IPv6 internet address is specified in the form x:x:x:x:x:x:x:x, where x is a hexadecimal number ranging from 0 through X'FFFF'. "::" may be used once in the IPv6 address to indicate one or more groups of 16 bits of zeros. The "::" may be used to compress leading, imbedded, or trailing zeros in the address.
Top |
Allow SNMPv3 support (ALWSNMPV3)
Specifies if SNMP version 3 (SNMPv3) support is enabled. The primary goal of SNMPv3 is to define a secure version of the SNMP by protecting the system from common threats such as modification of information, masquerade, disclosure, and message stream modification. SNMPv3 allows the configuration of SNMP users and access control to the managed objects based on the user trying to access them. SNMPv3 also facilitates remote configuration of the SNMP entities, which make remote administration of SNMP entities a much simpler task. In order to configure the list of SNMP users, the CFGTCPSNMP option 3 command can be used. The SNMPD.CONF file located in /QIBM/UserData/OS/SNMP/ is the SNMPv3 configuration file and is where all the users and their associated views are added.
- *SAME
- The value does not change.
- *YES
- SNMPv3 support is enabled.
- *NO
- SNMPv3 support is not enabled.
Top |
Default sub-agent timeout (DFTTIMEOUT)
Specifies the default timeout (in seconds) that this agent waits for a response from a Subagent. This value is used if a timeout value is not specified for the subtree nor for the subagent that exports.
- *SAME
- The value does not change.
- *DFT
- The default timeout value of 5 seconds is used.
- 1-3600
- Specify the number of seconds to be used for the default sub-agent timeout value. NOTEThis value should be equal or less than the value specified for MAXTIMEOUT.
Top |
Maximum sub-agent timeout (MAXTIMEOUT)
Specifies the maximum timeout (in seconds) that this agent allows for timeout values for Sub-agents. When you try to set any other timeout value it must be between 1 and this maximum value.
- *SAME
- The value does not change.
- *DFT
- The default timeout value of 60 seconds is used.
- 1-3600
- Specify the number of seconds to be used for the maximum sub-agent timeout value.
Top |
Allow duplicate identifiers (ALWDUPID)
Specifies if multiple instances of a sub-agent (as identified by the sub-agent Identifier) are allowed. Setting this parameter to the value *NO will prevent (new) duplicate sub-agent identifiers. However, if any duplicates exist when the parameter value is set to *NO, the agent will not remove them, that is considered a manager responsibility. This parameter must be set to *YES in order to allow multiple Distributed Program Interface (DPI) version 1 sub-agents.
- *SAME
- The value does not change.
- *YES
- Duplicate sub-agent identifiers are allowed.
- *NO
- Duplicate sub-agent identifiers are not allowed.
Top |
SNMP engine identifier (SNMPENGID)
Uniquely identifies the agent within an administrative domain. By default, the engine identifier is created using a vendor-specific formula and incorporates the IP address of the agent. However, any engine identifier that is consistent with the snmpEngineID definition in RFC 3411 and that is also unique within the administrative domain can be specified.
- *SAME
- The value does not change.
- *SYSGEN
- The engine identifier is generated by the IBM i SNMP agent.
- engine-identifier
- Specify the engine identifier to be be used for the IBM i SNMP agent.
Top |
SNMP engine boots (SNMPENGB)
Specifies the number of times the agent has been restarted since the SNMP engine identifier was last changed.
- *SAME
- The value does not change.
- *DFT
- The default value of 0 is used.
- 0-2147483647
- Specify the number of times the IBM i SNMP agent has been restarted since the last change of the engine identifier. Note that a value of 2147483647 is used to indicate that the SNMP agent was unable to determine its latest SNMP engine boots value or that it has reached the maximum number of boots. In order for the SNMP server to start, this value should be set to a value different from 2147483647 either by reseting the value of the SNMP engine boots or by changing the SNMP engine identifier.
Top |
Block size (BLKSIZE)
Specifies the block size that will be used when returning information in the hardware resources Management Information Base (MIB). Specifying a block size that is too small can have unpredictable results when retrieving the size of large storage pools or disk units since the size is returned as the number of blocks instead of the number of bytes. Changes to this parameter will take effect the next time the SNMP server starts.
Single values
- *SAME
- The value does not change.
Element 1: Storage pool
- *DFT
- The default value is determined by the system.
- 4K (4096), 8K (8192), 16K (16384), 32K (32768), 64K (65536), 128K (131072), 256K (262144), 512K (524288), 1M (1048576)
- Specify the block size to be used when retrieving storage pool information. Either the special value or the equivalent numerical value may be specified. Changing this value affects information retrieved for both auxiliary storage pools and memory pools.
Element 2: Disk unit
- *DFT
- The default value of 1024 is used.
- 1024, 2048, 4096, 8192, 16384, 32768
- Specify the block size to be used when retrieving disk unit information. Using a disk unit block size larger than 1024 causes the disk unit capacity information to no longer be compliant with RFC 1514, however, it can be changed to avoid issues with SNMP Managers receiving negative capacity values for high capacity disk units.
Top |
Additional information (ADLINF)
Specifies whether information in addition to the default system generated information is returned for selected SNMP object identifiers.
Single values
- *SAME
- The value does not change.
- *DFT
- Default system generated information is returned for all get, get-bulk, and get-next requests.
Other values
- *SYSD
- The text specified by the System description (SYSD) parameter of this command is added to the end of the default system generated text when returning the value of the system description. The system description is also known by SNMP managers and agents as sysDescr.
- *ASPNBR
- The number assigned to the storage pool is added to the end of the storage pool description text when returning the value of the storage pool description. The storage pool description is also known by SNMP managers and agents as hrStorageDescr.
Top |
Examples
Example 1: Changing System Description, System Contact and Automatic Start
CHGSNMPA SYSD('Software Test System') SYSCONTACT('Jane Doe, Phone 555-1212') AUTOSTART(*YES) ADLINF(*SYSD)
This command changes the system description and system contact information. It specifies that the SNMP agent should start when the STRTCP command runs. It specifies that additional information will be returned by the IBM i SNMP agent when an SNMP manager requests the system description (sysDescr). The sysDescr value returned will consist of the default system generated text followed by the text "Software Test System." All other values are unchanged.
Example 2: Changing Trap Managers
CHGSNMPA TRPMGR(('9.8.7.6' '255.255.0.0' 'TRAPCOMMUNITY') ('2001:db8::10f' 64 'TRAPCOMMUNITY2'))
This command causes any traps generated by the local system to be sent to SNMP managers that have internet protocol addresses 9.8.7.6 and 2001:db8::10f. Community name TRAPCOMMUNITY is placed in traps sent to 9.8.7.6, and community name TRAPCOMMUNITY2 is placed in traps sent to 2001:db8::10f. For both managers the community name is translated to ASCII characters before being placed in the trap.
Example 3: Enabling SNMPv3, changing the Default and Maximum Sub-agent Timeout, allowing Duplicate Sub-agent IDs, regenerating the SNMP engine ID and resetting the SNMP engine boots value
CHGSNMPA ALWSNMPV3(*YES) DFTTIMEOUT(10) MAXTIMEOUT(3600) ALWDUPID(*YES) SNMPENGID(*SYSGEN) SNMPENGB(0) LOGGET(*YES)
This command allows SNMPv3 to be enabled in the system and changes the default sub-agent timeout to 10 and the maximum sub-agent timeout to 3600. This command also allows multiple instances of sub-agent identifiers, indicates the IBM i agent to generate the SNMP engine and resets the SNMP engine boots count. Get, get-bulk , get-next, and SNMPv3 engine identifier discovery requests are logged by default to journal QSNMP in library QUSRSYS unless specified otherwise by the specific community or SNMPv3 user. All other values are unchanged.
Example 4: Configuring the Local Trap Manager
CHGSNMPA LCLTRPMGR(*YES *YES '10.1.2.3' 'v3User')
This command configures the IBM i local trap manager to start when SNMP starts. The local trap manager will also forward trap and inform messages. If an SNMPv3 inform message is received, it will forward it to the trap manager application at IP address 10.1.2.3. The SNMPv3 user v3User will be used for sending the inform message to IP address 10.1.2.3.
Top |
Error messages
*ESCAPE Messages
- TCP4001
- Error occurred accessing SNMP configuration information.
- TCP8050
- *IOSYSCFG authority required to use &1.
Top |