SNMP Connection Handler

The SNMP Connection Handler can be used to process SNMP requests to retrieve monitoring information described by the MIB 2605. Supported protocol are SNMP V1, V2c and V3.

The SNMP connection handler will process SNMP requests sent by SNMP Managers to retrieve information described the MIB 2605. To enable the SNMP Connection Handler, the ds-cfg-opendmk-jarfile parameter has to be set to the OpenDMK jar files location.

Parent

The SNMP Connection Handler object inherits from Connection Handler.

Properties

Use the --advanced option to access advanced properties.

Basic Properties

allowed-client

SynopsisSpecifies a set of host names or address masks that determine the clients that are allowed to establish connections to this Connection Handler.
DescriptionValid values include a host name, a fully qualified domain name, a domain name, an IP address, or a subnetwork with subnetwork mask.
Default ValueAll clients with addresses that do not match an address on the deny list are allowed. If there is no deny list, then all clients are allowed.
Allowed ValuesAn IP address mask.
Multi-valuedYes
RequiredNo
Admin Action RequiredNone
Changes to this property take effect immediately and do not interfere with connections that may have already been established.
AdvancedNo
Read-OnlyNo

allowed-manager

SynopsisSpecifies the hosts of the managers to be granted the access rights. This property is required for SNMP v1 and v2 security configuration. An asterisk (*) opens access to all managers.
Default Value*
Allowed ValuesA string.
Multi-valuedYes
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

allowed-user

SynopsisSpecifies the users to be granted the access rights. This property is required for SNMP v3 security configuration. An asterisk (*) opens access to all users.
Default Value*
Allowed ValuesA string.
Multi-valuedYes
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

community

SynopsisSpecifies the v1,v2 community or the v3 context name allowed to access the MIB 2605 monitoring information or the USM MIB. The mapping between "community" and "context name" is set.
Default ValueOpenDJ
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

denied-client

SynopsisSpecifies a set of host names or address masks that determine the clients that are not allowed to establish connections to this Connection Handler.
DescriptionValid values include a host name, a fully qualified domain name, a domain name, an IP address, or a subnetwork with subnetwork mask. If both allowed and denied client masks are defined and a client connection matches one or more masks in both lists, then the connection is denied. If only a denied list is specified, then any client not matching a mask in that list is allowed.
Default ValueIf an allow list is specified, then only clients with addresses on the allow list are allowed. Otherwise, all clients are allowed.
Allowed ValuesAn IP address mask.
Multi-valuedYes
RequiredNo
Admin Action RequiredNone
Changes to this property take effect immediately and do not interfere with connections that may have already been established.
AdvancedNo
Read-OnlyNo

enabled

SynopsisIndicates whether the Connection Handler is enabled.
Default ValueNone
Allowed Valuestrue
false
Multi-valuedNo
RequiredYes
Admin Action RequiredNone
AdvancedNo
Read-OnlyNo

listen-address

SynopsisSpecifies the address or set of addresses on which this SNMP Connection Handler should listen for connections from SNMP clients.
DescriptionMultiple addresses may be provided as separate values for this attribute. If no values are provided, then the SNMP Connection Handler listens on all interfaces.
Default Value0.0.0.0
Allowed ValuesAn IP address.
Multi-valuedYes
RequiredNo
Admin Action RequiredRestart the server for changes to take effect.
AdvancedNo
Read-OnlyYes

listen-port

SynopsisSpecifies the port number on which the SNMP Connection Handler will listen for connections from clients.
DescriptionOnly a single port number may be provided.
Default ValueNone
Allowed ValuesAn integer. Lower limit: 1. Upper limit: 65535.
Multi-valuedNo
RequiredYes
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

opendmk-jarfile

SynopsisIndicates the OpenDMK runtime jar file location
Default ValueNone
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

registered-mbean

SynopsisIndicates whether the SNMP objects have to be registered in the directory server MBeanServer or not allowing to access SNMP Objects with RMI connector if enabled.
Default Valuefalse
Allowed Valuestrue
false
Multi-valuedNo
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

security-agent-file

SynopsisSpecifies the USM security configuration to receive authenticated only SNMP requests.
Default Valueconfig/snmp/security/opendj-snmp.security
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

security-level

SynopsisSpecifies the type of security level : NoAuthNoPriv : No security mechanisms activated, AuthNoPriv : Authentication activated with no privacy, AuthPriv : Authentication with privacy activated. This property is required for SNMP V3 security configuration.
Default Valueauthnopriv
Allowed Values

authnopriv: Authentication activated with no privacy.

authpriv: Authentication with privacy activated.

noauthnopriv: No security mechanisms activated.

Multi-valuedNo
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

trap-port

SynopsisSpecifies the port to use to send SNMP Traps.
Default ValueNone
Allowed ValuesAn integer. Lower limit: 0.
Multi-valuedNo
RequiredYes
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

traps-community

SynopsisSpecifies the community string that must be included in the traps sent to define managers (trap-destinations). This property is used in the context of SNMP v1, v2 and v3.
Default ValueOpenDJ
Allowed ValuesA string.
Multi-valuedNo
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

traps-destination

SynopsisSpecifies the hosts to which V1 traps will be sent. V1 Traps are sent to every host listed.
DescriptionIf this list is empty, V1 traps are sent to "localhost". Each host in the list must be identifed by its name or complete IP Addess.
Default ValueIf the list is empty, V1 traps are sent to "localhost".
Allowed ValuesA string.
Multi-valuedYes
RequiredNo
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedNo
Read-OnlyNo

Advanced Properties

java-class

SynopsisSpecifies the fully-qualified name of the Java class that provides the SNMP Connection Handler implementation.
Default Valueorg.opends.server.snmp.SNMPConnectionHandler
Allowed ValuesA Java class that extends or implements:
org.opends.server.api.ConnectionHandler
Multi-valuedNo
RequiredYes
Admin Action RequiredThe object must be disabled and re-enabled for changes to take effect.
AdvancedYes
Read-OnlyNo