PROBLEM:

We have to configure the security settings for the SNMP-Service on a Windows Server. But they are missing!

Here are the facts:

• OS: Windows Server 2012 R2
• We installed the SNMP feature, that we already configured the service (but we forgot to add another IP under Security tab)
• We know the issue where you have to restart the SNMP-service after you installed the feature to see the Security tab (so we made already some restarts.)
• We installed now the DC server role.
• Now we can not see the Security tab anymore (we don’t know if it has to do something with the installation of the DC role).
• We really need SNMP for monitoring reasons. (So please don’t advise to use WMI or other things)
• We used my domain admin when clicking on “SNMP-Service” –> “Properties”
• What can we do to see the Security tab again? Or is there a possibility to configure the SNMP service via CMD or PowerShell?

SOLUTION 1:

• How to: Set SNMP settings through registry
• We set up Permitted Managers and Valid Communities.
• HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Services\SNMP\Parameters\Permitted Managers

REG_SZ

Value name: 1

Value data: (IP address of monitoring server)

HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Services\SNMP\Parameters\Valid Communities

REG_DWORD

Value Data: 4

Value Name: (community string)

SOLUTION 2:

• The configuration directive you should add to /etc/snmp/snmpd.conf is:

Code:

agentaddress udp:161

• What does netstat say about UDP port 161? This will show you if the socket is in use:

Code:

netstat -lupn | grep :161

• And what happens if you try to start snmpd manually with:

Code:

/usr/sbin/snmpd -c /etc/snmp/snmpd.conf