Disable snmp v2 & v1 about puppet-snmp HOT 6 CLOSED

After looking into the code you can disable v1/v2 by passing an empty array to com2sec and com2sec6 parameters.

class { 'snmp':
  com2sec      => [],
  com2sec6     => [],
}

from puppet-snmp.

@hdep I am not positive, but try this:

class { 'snmp':
  ro_community  => undef,
  ro_community6 => undef,
  groups         => [ 'myGroupName v3         mySecName', ],
}

from puppet-snmp.

Any updated comments on disabling v1/v2 as part of the config? Below are the required steps:

In order to disable the v1 and v2c of SNMP a comment must be added on the com2sec & access lines in the snmpd.conf file, in e.g:

        #com2sec notConfigUser  default       public
        group   notConfigGroup v1           notConfigUser
        group   notConfigGroup v2c           notConfigUser
        view    systemview    included   .1.3.6.1.2.1.1
        view    systemview    included   .1.3.6.1.2.1.25.1.1
        #access  notConfigGroup ""      any       noauth    exact  systemview none none

To disable SNMP v1 connection only, comment out the line of "group notConfigGroup v1 notConfigUser" only. SNMP v2c is still available.

        com2sec notConfigUser  default       public
        #group   notConfigGroup v1           notConfigUser
        group   notConfigGroup v2c           notConfigUser
        view    systemview    included   .1.3.6.1.2.1.1
        view    systemview    included   .1.3.6.1.2.1.25.1.1
        access  notConfigGroup ""      any       noauth    exact  systemview none none

from puppet-snmp.

Looks like a documentation update is in order.

from puppet-snmp.

Thank you.
Juste tried that on Debain 9 I got some error :

Aug 9 16:49:39 serversnmpd[12025]: /etc/snmp/snmpd.conf: line 22: Error: Blank line following com2sec token.
Aug 9 16:49:39 server snmpd[12025]: /etc/snmp/snmpd.conf: line 24: Error: Blank line following com2sec6 token.

Maybe it would more efficient to create a variable which enable or disable snmpv2 configuration ?

from puppet-snmp.

I did a PR for this :
#128

Any help appreciated to fix the remaining issue, but it is working on my VM.

from puppet-snmp.