优雅草星云智控系统产品发布会前瞻：SNMP协议全设备开启指南-优雅草卓伊凡

pie
    title SNMP在物联网中的优势占比
    "低资源消耗" : 35
    "跨平台兼容" : 25
    "实时监控能力" : 20
    "标准化程度高" : 15
    "安全可扩展" : 5

graph TD
    A[控制面板] --> B[程序和功能]
    B --> C[启用或关闭Windows功能]
    C --> D[勾选SNMP服务]
    D --> E[配置社区名称]
    E --> F[设置允许主机]

# 管理员身份运行
Enable-WindowsOptionalFeature -Online -FeatureName "SNMP" -All
Set-Service -Name "SNMP" -StartupType Automatic
Start-Service -Name "SNMP"

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities]
"public"=dword:00000004

New-NetFirewallRule -DisplayName "SNMP Inbound" -Direction Inbound -Protocol UDP -LocalPort 161 -Action Allow

dism /online /enable-feature /featurename:SNMP-Service

# 启用SNMP操作审计
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\SNMP\Parameters" -Name "EnableAuthenticationTraps" -Value 1

# 创建只读社区
com2sec readonly  default       gc_public

# 定义视图
view    systemview  included   .1.3.6.1.2.1.1
view    systemview  included   .1.3.6.1.4.1.2021

# 权限控制
access  readonly  ""      any       noauth    exact  systemview none none

# 监听所有IPv4接口
agentAddress udp:161

# 禁止SNMPv1/v2写操作
rocommunity gc_public 192.168.1.0/24

# 在/etc/snmp/snmpd.conf末尾添加
extend .1.3.6.1.4.1.2021.50 gc_temp /usr/local/bin/get_temp.sh

#!/bin/bash
# get_temp.sh
echo $(cat /sys/class/thermal/thermal_zone0/temp)

! 启用SNMP服务
snmp-server community gc_public RO
snmp-server host 192.168.1.100 version 2c gc_public
snmp-server enable traps
snmp-server location "Server Room A3"
snmp-server contact "IT Dept"

! 限制访问范围
access-list 10 permit 192.168.1.100
snmp-server community gc_public RO 10

snmp-agent
snmp-agent sys-info version v2c
snmp-agent community read gc_public
snmp-agent target-host trap address udp-domain 192.168.1.100 params securityname gc_public v2c

# SNMP-Modbus桥接脚本示例
from pysnmp.entity import engine, config
from pymodbus.client import ModbusTcpClient

def snmp_callback(snmp_engine, send_request, cb_ctx):
    # 转换SNMP请求为Modbus查询
    client = ModbusTcpClient('plc_ip')
    result = client.read_holding_registers(addr, count)
    # 返回SNMP响应
    return result.registers

opkg update
opkg install snmpd

# /etc/config/snmpd
config agent
    option agentaddress  UDP:161
    option syslocation   'Office Router'
    option syscontact    'admin@guichao.com'
    option com2sec      'gc_public default gc_public'

/etc/init.d/snmpd enable
/etc/init.d/snmpd start

# 编译Net-SNMP时指定ARM架构
./configure --host=arm-linux-gnueabihf --with-endianness=little
make
make install

# 仅监控关键指标
view   systemonly  included   .1.3.6.1.2.1.1
view   systemonly  included   .1.3.6.1.4.1.2021.10

sequenceDiagram
    星云控制器->>设备: 发送ADP探测包
    设备-->>星云控制器: 返回SNMP能力信息
    星云控制器->>设备: 自动下发配置模板
    设备-->>星云控制器: 确认配置完成

# 自动化配置脚本
from pysnmp.hlapi import *

errorIndication, errorStatus, errorIndex, varBinds = next(
    setCmd(SnmpEngine(),
           UsmUserData('admin', 'authKey123', 'privKey456',
                       authProtocol=usmHMACSHAAuthProtocol,
                       privProtocol=usmAesCfb128Protocol),
           UdpTransportTarget(('device_ip', 161)),
           ContextData(),
           ObjectType(ObjectIdentity('SNMPv2-MIB', 'sysContact', 0),
                      '星云智控系统'))
)