So now that we've learned the basics of how SNMP works at the
packet level and how it works at the protocol level,
we're going to move on and configure SNMP.
Basically, in this module,
we're going to install and configure SNMP on a Windows 2016 Server.
We'll only configure SNMP version 2 on this server because
Windows Server does not support SNMP version 3.
They really want you to use WinRM and WMI to monitor and manage their servers,
and so, they've really kind of deprecated SNMP.
You'll see when we get into the demo that we even have to go and install
the SNMP service because it's not installed by default.
We'll also install it on a Linux variant,
both versions v2c and v3, and on a Cisco device,
again,
v2c and v3 because Linux and Cisco both natively support both versions of SNMP.
So here we are on our Windows Server,
this is just the stock Windows Server 2016 image that runs
in Microsoft Azure if you wanted to play along at home with
your own copy of the home game.
So the first thing we're going to do is go into the Server Manager,
and once that is loaded up,
we're going to add rules and features and we are going to
add the SNMP feature to this server.
You scroll down here and you notice we have the simple
network management protocol service, SNMP service,
if we expand it out, we see the option for the WMI provider as well.
We can go ahead and include both of those.
We'll hit Next, and Install, and wait for it to finish installation,
and like so, it's complete.
So we'll go ahead and close and we configure the SNMP
service through the Control Panel,
specifically the Services section of the Control Panel.
So we'll just go straight to Services and we will
scroll down to the SNMP service.
And you'll notice we have two entries for the SNMP service and the SNMP trap.
We will look at the SNMP service first and where we're
going to look at is the security.
Now some of you that do remote management of servers,
you can access the Services Control Panel from a remote system,
but if you go to SNMP,
a lot of times the Security tab and the Traps tab are missing,
and many times,
that's simply because the Management tool snap-ins are
not installed on your management PC.
So the first thing we're going to look at is the accepted community names.
Now you can have as many community names as you want,
each with different rights.
So you can have READONLY, and READ WRITE,
READ CREATE, which I've never actually used,
but it just allows you to make new entries in the SNMP database,
but not actually overwrite any existing ones.
And of course, you have Notify, which is used for SNMP traps.
Really,
the only two that are used in most networks are read only and read write so
we'll add a read only community string of GLOBO-OR and hit Add,
and we'll add a READ WRITE community string of,
can you guess what it's going to be, GLOBO-RW.
The second box towards the bottom is where you set up security for your SNMP.
Again, since Windows does not natively support SNMP v3,
you can lock it down so that it only accepts SNMP packets and
only sends SNMP traps to specific IP addresses.
It defaults to localhost, but you can add as many of them as you want.
In this case,
we're going to add our management server end because we're going to be
installing SNMP Management tools on that server later.
So we'll enter in the IP address 192.168 .50 .5,
we hit Add, and we see that it's now in the list.
The next thing we're going to look at is the Traps tab and this is where you
enter in the information for the server sending SNMP traps.
You'll notice that it doesn't actually reflect the community names
that are on the previous screen for security.
If we add one in here for notify, it still would not show up here.
You just have to type it in.
In this case, we'll name it GLOBO-NOT and we'll say Add to list.
Next,
you specify the trap destinations again since this is the server
sending out information to a network management station.
You have to tell it where to send the traps to, in this case, 192.168 .150 .5.
So now that we've properly set the security up on this guy,
we'll hit OK,
and you might be asking well what about this SNMP trap service down here.
Well this is for allow the server that you're on to receive trap messages
generated by local or remote simple network management agents and forwards
the messages to SNMP programs on remote computers.
So it's kind of like a trap forwarder if you had a device say in a DMZ and you
needed to get SNMP traps out of the DMZ fairly securely.
And that's pretty much it. That's how you install and configure SNMP on Windows 2016.