Local MIB access - accessing MIB localy without UDP, and without authentication.

"Makavy, Erez (Erez)" <[email protected]>
Newsgroups gmane.network.net-snmp.user
Message-ID <AAB4B3D3CF0F454F98272CBE187FDE2F09CE8958@is0004avexu1.global.avaya.com>
Hey,


Let me make myself clearer.
I'd like to know if and how it is possible to use net-snmp for
retrieving MIB variable values, without actually sending a UDP packet,
and without the overhead of USM/VACM authentication and authorization.
Meaning, how to bypass these and use net-snmp internal API for asking
the master agent for a request.
 
1) It doesn't seems like 'netsnmp_query_get' does that, or does it?
	1a) I see that 'netsnmp_query_get' eventually uses
'snmp_synch_response_cb',
	     Does that send an SNMP request (via UDP packet) to the peer
mentioned in the given session?


Different matter - Remote MIB access
-------------------------------------------------------
Say I want a process on my system to have a snmp session constantly
opened, and I want bypass the overhead of  authentication or
authorization for requests coming through that session.
In other words it like an internal snmpget utility, but different. Its
Basically a process which hold an opened snmp session with the master,
and sends it requests which come from other processes  in the system
(via msg_q).

2) can I pass some parameter in session, which indicates to bypass the
whole USM, VACM verification process?
    (accept from defining and using a user which needs not
authentication , and has a full view)
3) If I must use a user, can I restrict the peer names (IP address) who
can use that user?


Thanks,
Erez Makavy



> -------------------------------------------------------------
> Different subject
> -------------------------------------------------------------
> [Question 2]
> Does net-snmp support "Local MIB Access"? (How?)
> 
> Meaning...
> Can an application (running on the same system as the master agent), 
> lookup an OID value at the master agent,

Yes.

If you look at the new 5.3 code, you'll even see a new set of utility
routines 'netsnmp_query_get' et al, to help with this.


>  without actually sending an internal SNMP request?

No.

If you want to retrieve information from the SNMP agent, you need to
send an SNMP request to it.  That's how the agent works.

But remember that the agent holds relatively little information itself -
most of the time it's retrieving data from the underlying operating
system.  If you're running on the same host and don't want to send an
SNMP request, you can always query the underlying system directly - you
don't have to use SNMP at all.

But if you're using the SNMP agent, you need to talk SNMP.


Dave



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click
_______________________________________________
Net-snmp-users mailing list
[email protected]
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.