Tunnel – SNMP configuration parameters: “SNMP_”

Configuration parameters with the prefix SNMP_ are related to MTX-Tunnel configurations where SNMP protocol is necessary. SNMP (Simple Network Management Protocol) is a very extended protocol serving for control of field-installed modems.

From the version MTX-Tunnel v9.16 onwards it is possible to use SNMP with all MTX modem models containing MTX-Tunnel firmware. SNMPv2 protocol is not fully included, but it does include the 2 most important functions GET and SET. By means of GET command it is possible to know the state of the modem installed in field (coverage, functioning time, operator…), as well as to read its configuration parameters. By means of SET command it is possible to change the modem’s configurations remotely (serial port speed, apn…).

It is very important to know that via SNMP it is possible to execute any AT command in the modem in the same way we would it through Telnet, Webserver, SMS… This allows to carry out any remote task with SNMP, including reset, configuration changes, firmware update…

SNMP_enabled

Description: Enable/disable is SNMP service in MTX-Tunnel.

Possible values:

• on, off
• Default value: off

Additional notes:

• In case you do not need SNMP service, do not activate it in your application in order to avoid unnecessary CPU resources consumption

SNMP_port

Description: UDP listening port to receive GET/SET requests from SNMP protocol.

Possible values:

• 1… 65535
• Default value: 161

Additional notes:

• It is recommended to maintain UDP 161 port, because this is the standard of SNMP protocol
• If you use MTX-Tunnel for a UDP-RS232 gateway, do not use the same UDP port for both services (for the gateway and for SNMP). Use different ports

SNMP_community , SNMP_communityW

Description: With these parameters you can configure passwords for reading (SNMP_community) and writing(SNMP_communityW) operations respectively.

Possible values:

• A text string up to 127 characters
• Default value: public

Additional notes:

• Check SNMP_auth and SNMP_password parameters if you want additional security for SNMPv2

SNMP_auth

Description: This parameter allows you to increase the security of SNMP version 2. It basically allows you to enable or disable SNMP service by writing in an OID SNMP. This way it is possible to enable SNMP service only when it is necessary to conduct an operation.

Possible values:

• std, otp
• Default value: std

Additional notes:

• When choosing the option “std”, the authentication process is a standard process of SNMPv2 communication, using SNMP_community and SNMP_communityW parameters
• When choosing the option “otp” SNMP can be enabled/disabled voluntarily. The process is as follows:
  1. OID MTX_OTP (.1.3.6.1.4.1.45711.2.1.10.3) is read. It returns a random value as a
  response (SALT)
  2. HASH is calculated, using SHA-256 from: SALT-IMEI-SNMP_password. The first 15 HASH characters are written in OID MTX_OTP. At this moment SNMP service is enabled for reading/writing options
  3. When finished, 0 should be written in OID MTX_OTP to suspend SNMP service

• Remember that you can also activate the firewall from the modem (FIREWALL_enabled: on) to be able to access SNMP only from authorized IPs (FIREWALL_IPx), thus providing a higher security level
• Finally, keep in mind that it is also possible to keep SNMP service deactivated and activate any moment via SMS from an authorized phone number

SNMP_password

Description: This parameter allows you to increase the security of SNMPv2. In case SNMP_auth parameter is configured as “otp”, it should be used to complete HASH SHA-256 that should be returned to the modem to enable SNMP service.

Possible values:

• 0… 32 chars
• Default value: none

Additional notes:

• See SNMP_auth parameter for more information