Section 3.29. <SNMPAgent>

3.29. <SNMPAgent>

This optional clause enables an SNMP Agent that will allow you to fetch statistics from Radiator using SNMP version 1 or 2c. Radiator supports all the SNMP objects described in the draft IETF standard defined in draft-ietf-radius-servmib-04.txt, as well as:

RFC2619 - RADIUS Authentication Server MIB
RFC2621 - RADIUS Accounting Server MIB
RFC4669 - RADIUS Authentication Server MIB for IPv6
RFC4671 - RADIUS Accounting Server MIB for IPv6

Copies of the standards documents are included in the doc directory of the Radiator distribution.

SNMPAgent requires SNMP_Session-0.92.tar.gz or later to be installed first.

Red Hat Enterprise Linux, CentOS and Oracle Linux users can install the vendor supplied perl-SNMP_Session RPM package. For .deb based systems the package may be available as libsnmp-session-perl or other similar name. The source package is available for download from SNMP-session

If you do not include this clause in your Radiator configuration file, it will not respond to any SNMP requests.

# Example, showing how to enable SNMP handling
<SNMPAgent>
      ROCommunity mysnmpsecret
</SNMPAgent>

If you enable SNMPAgent, you will be able to collect server statistics using a 3rd party SNMP package such as MRTG, Open View etc. You can also use SNMP to reset the server.

You can test that it is working properly with a command on Unix like this one, that gets the value of radiusServIdent from the old draft MIB:

$ snmpget -c public -v 1 localhost .iso.org.dod.internet.
3.79.1.1.1.1
SNMPv2-SMI::experimental.79.1.1.1.1 = STRING: "Radiator 3.6 on zulu"

And this gets the uptime from the new Authentication server MIB:

$ snmpget -c public -v 1 localhost .1.3.6.1.2.1.67.1.1.1.1.2
SNMPv2-SMI::mib-2.67.1.1.1.1.2 = Timeticks: (200) 0:00:02.00

3.29.1. Port

This optional parameter specifies the UDP port number that the SNMP Agent is to listen on. It defaults to 161. There should only rarely be any reason to change it. The argument may be either a numeric port number or an alphanumeric service name as specified in /etc/services/ (or its moral equivalent on your system). Port may contain special formatting characters. A typical use of special formatting characters is with GlobalVar and command line arguments.

# Use a non-standard port
Port 9991

3.29.2. BindAddress

This optional parameter specifies a single host address to listen for SNMP requests on. It is only useful if you are running Radiator on a multi-homed host (i.e. a host that has more than one network address). Defaults to the global value of BindAddress, usually 0.0.0.0 i.e. listen on all networks connected to the host. For more information, see Section 3.7.9. BindAddress BindAddress can include special formatting characters. Requires SNMP_Session version 0.92 or greater.

# Only listen on one network, not all the ones connected
BindAddress 203.63.154.0

3.29.3. Community

SNMP V1 provides a weak method of authenticating SNMP requests, using the ‘community name’. This optional parameter allows you to specify the SNMP V1 community name that will be honoured by SNMPAgent. Any SNMP request that does not include the correct community name will be ignored. Defaults to nothing. We strongly recommend that you choose a community name and keep it secret.

Community is now deprecated, but is still honoured for backwards compatibility. New implementations should use ROCommunity and /or RWCommunity.

# Use a secret community.
Community mysnmpsecret

3.29.4. ROCommunity

SNMP V1 provides a weak method of authenticating SNMP requests, using the ‘community name’. This optional parameter allows you to specify the SNMP V1 community name that will be honoured by SNMPAgent for read-only access. Defaults to nothing, you have to define one by yourself.

We strongly recommend that you choose a community name and keep it secret.

# Use a secret community.
ROCommunity mysnmprosecret

3.29.5. RWCommunity

This optional parameter allows you to specify the SNMP V1 community name that will be used by SNMPAgent to authenticate read-write access. Knowing this secret you are able to reset Radiator via SNMP. Defaults to nothing. If you do not need resetting via SNMP use only ROCommunity.

# only necessary for resetting via SNMP
RWCommunity extremelysecure

3.29.6. Managers

This optional parameter specifies a list of SNMP managers that have access to SNMPAgent. The value is a list of host names or addresses, separated by white space or comma. You can have any number of Managers lines. Defaults to nothing with all hosts allowed.

# allowed SNMP managers
Managers    foo.bar.edu 192.168.1.11, noc.rz.uni-ulm.de
Managers    baz.bar.com,10.1.1.254