Disabling SNMPv1 and SNMPv2c leaving SNMPv3 enabled

This document (7017266) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 10
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 12

Situation

It is desired to increase security by disabling SNMPv1 and SNMPv2c,
leaving SNMPv3 enabled.

Resolution

The default configuration permits a community named 'public' read-only
access from the localhost.

It does so through the following configuration line in /etc/snmp/snmpd.conf

rocommunity public 127.0.0.1

Commenting out this line or removing it altogether will disable this access.

Restart the snmpd daemon.

# /etc/init.d/snmpd restart

After starting snmpd, you can verify that the SNMPv1 and SNMPv2c access
is disabled using the snmpwalk utility:

# snmpwalk -v1 -c public localhost
Timeout: No Response from localhost

# snmpwalk -v2c -c public localhost
Timeout: No Response from localhost

Cause

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.