Changing The Community Name For Snmpd - Novell ZENWORKS NETWORK ACCESS CONTROL 5.0 - 09-22-2008 User Manual

Restricting the ICMP Request
If you wish to restrict the ping request to a specific interface, such as the interface facing the
protected network, then after following the procedures above, follow the instructions in this section
to add rules to the firewall chain so that ping requests are only viable through the interface specified.
To restrict ping entries to a specific interface:
Command line
1 At the MS command line, enter the following iptables entries in this order:
iptables -A RH-Lokkit-0-50-INPUT -p icmp --icmp-type echo-request -i ethx -j
ACCEPT
iptables -A RH-Lokkit-0-50-INPUT -p icmp --icmp-type echo-request -j DROP
Where:
ethx is the interface that you wish to be "pingable". For example, eth0.
2 In order for these changes to persist through reboots, enter the following command at the
command line:
iptables-save > /etc/sysconfig/iptables.save

16.21.2 Changing the Community Name for SNMPD

Novell ZENworks Network Access Control includes snmpd and it is started by default. You need to
change the notpublicsnmp community name to something specific for your community.
To change the community name:
Command line window
1 Log in as root to the Novell ZENworks Network Access Control MS using SSH.
2 Open the following file with a text editor such as vi:
/etc/snmp/snmpd.conf
snmpd.conf Example File
-----------------------------------------------------------------------------
# Thu Jul 05 15:14:53 MDT 2007
# This file is generated automatically. Please do not edit. Edit the
snmpd.conf.template file instead.
#
# This is a template for the snmpd.conf file.
# The following variables will be replaced:
# SOURCE - replaced with the source CIDR network that is allowed to access
# COMMUNITY - replaced with the community string for which permissions are
being set
#
com2sec allowed_net
group allowed_net_mon
group allowed_net_mon
group allowed_net_mon
view all included
default notpublicsnmp
v1
v2c
usm
system
allowed_net
allowed_net
allowed_net
System Administration 375