Collection of CheckMK checks (see https://checkmk.com/). All checks and plugins are provided as is. Absolutely no warranty. Send any comments to thl-cmk[at]outlook[dot]com

Skip to content
Snippets Groups Projects
Commit f8b4a20c authored by thl-cmk's avatar thl-cmk :flag_na:
Browse files

Update README.md

parent 60b7bf6d
No related branches found
No related tags found
No related merge requests found
[PACKAGE]: ../../raw/master/snmp_state-0.0.3-20230802.mkp "snmp_state-0.0.3-20230802.mkp" [PACKAGE]: ../../raw/master/snmp_state-0.0.3-20230802.mkp "snmp_state-0.0.3-20230802.mkp"
# SNMP State # SNMP Configuration
This plugin is intended to help you keep track of the SNMP configuration CheckMK is using to monitor your hosts. This plugin is intended to help you keep track of the SNMP configuration CheckMK is using to monitor your hosts.
It will generate alerts for old/bad SNMP configurations. Via WATO you can configure what old/bad means for you. It will generate alerts for old/bad SNMP configurations. Via WATO you can configure what old/bad means for you.
...@@ -13,8 +13,8 @@ It will generate alerts for old/bad SNMP configurations. Via WATO you can config ...@@ -13,8 +13,8 @@ It will generate alerts for old/bad SNMP configurations. Via WATO you can config
You can install the package by uploading it to your CheckMK site and as site user run You can install the package by uploading it to your CheckMK site and as site user run
``` ```
mkp install snmp_state-0.0.3-20230802.mkp mkp install snmp_configuration-0.0.3-20230802.mkp
mkp enable snmp_state 0.0.3-20230802 mkp enable snmp_configuration 0.0.3-20230802
``` ```
In the Enterprise/Free/Cloud edition of CheckMK you can use the GUI to install the package (_Setup_ -> _Extension Packages_ -> _Upload package_) In the Enterprise/Free/Cloud edition of CheckMK you can use the GUI to install the package (_Setup_ -> _Extension Packages_ -> _Upload package_)
...@@ -27,7 +27,7 @@ Nice ;-) Have a look at the [contribution guidelines](CONTRIBUTING.md "Contribut ...@@ -27,7 +27,7 @@ Nice ;-) Have a look at the [contribution guidelines](CONTRIBUTING.md "Contribut
--- ---
### Check Info ### Check Info
The plugin creates the service **_SNMP State_** for each host with SNMP enabled The plugin creates the service **_SNMP Configuration_** for each host with SNMP enabled
<details><summary>Montoring states</summary> <details><summary>Montoring states</summary>
...@@ -51,27 +51,29 @@ There are no perf data. ...@@ -51,27 +51,29 @@ There are no perf data.
| Section | Rule name | | Section | Rule name |
| ------ | ------ | | ------ | ------ |
| Networking | SNMP State | | Applications, Processes & Services | Checkmk SNMP Configuration |
| Option | Defailt value | | Option | Defailt value |
| ------ | ------ | | ------ | ------ |
| excepted SNMP Versions | Version 3 | | Report only | Disabled |
| Monitoring state if version not in excepted versions | Warning | | SNMP Version | Version 3 |
| excepted SNMP v3 level | authentication and privacy | | Monitoring state if version not in list | WARN |
| Monitoring state if level is not in excepted list | Warning | | SNMP v3 level | authentication and privacy |
| excepted SNMP v3 authentication | SHA, SHA-224, SHA-256, SHA-384, SHA-512 | | Monitoring state if level is not list | WARN |
| Monitoring state if authentication is not in excepted list | Warning | | SNMP v3 authentication | SHA, SHA-224, SHA-256, SHA-384, SHA-512 |
| excepted SNMP v3 encryption | AES-128 | | Monitoring state if authentication is not in list | WARN |
| Monitoring state if SNMP v3 encryption is not in excepted list | Warning | | SNMP v3 encryption | AES-128 |
| excepted SNMP backend| Inline, Classic | | Monitoring state if encryption is not in list | WARN |
| Monitoring state if backend not in excepted backends | Warning | | SNMP backend | Inline, Classic |
| minimal key length | 10 | | Monitoring state if backend not in list | WARN |
| Monitoring state if key length below minimal key length | Warning | | Minimal key length | 10 |
| Monitoring state when authentication and encryption key are identical | Warning | | Monitoring state if key length below minimal key length | WARN |
| List of default keys | public, private | | Monitoring state when authentication and encryption keys are identical | WARN |
| Monitoring state if key used is a default key | Warning | | Check default key values | public, private |
| Key complexity excepted characters in the key | Digit, Lowercase, Uppercase, Special | | Check reversed keys | Enabled |
| Monitoring state if key complexity not met | Warning | | Monitoring state if key used is a default key | WARN |
| Key complexity | Digit, Lowecase, Uppercase, Special, no repeated chars |
| Monitoring state if key complexity not met | WARN |
</details> </details>
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment