Although SNMP is easy to use, we need to avoid the security risks caused by the SNMP service. The most thorough way is to disable the SNMP service. If you do not use the SNMP Service to manage the network, you do not need to run it. If you do not know whether it is necessary to run SNMP, you may not need it.
Even if you want to use the SNMP service in the future, you should disable it as long as it is not used now until you actually need to use the SNMP service.
The following describes how to disable the SNMP service on common platforms.
■Windows XP and Windows 2000
In XP and Windows 2 K, right-click my computer and choose manage ". Expand "services and applications" and "services", select the SNMP service from the service list, and stop the service. Then, open the "properties" dialog box of the service, set the start type to "disabled" According to Microsoft's default settings, and Win 2 K/XP does not install the SNMP service by default, but many software will automatically install the service ).
■ Windows NT 4.0
Select Start> set, open the service setup program, select the SNMP service in the service list, stop the service, and disable the Startup type.
■ Windows 9x
Open the network setup program of the control panel, select "Microsoft SNMP proxy" from the list of installed components on the "configuration" page, and click "delete ". Check HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ RunServices and HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ runregistration key to confirm that snmp.exe does not exist.
■ Cisco Systems hardware
For Cisco network hardware, run the "no SNMP-server" command to disable the SNMP service. To check whether the SNMP service is disabled, run the "show SNMP" command. These commands are only applicable to platforms running Cisco IOS. For non-IOS Cisco devices, see the random document.
■ HP hardware
For all HP network devices that use JetDirect cards for most HP network printers, use telnet to connect to the IP address of the JetDirect card, and then execute the following command:
SNMP-config: 0
Quit
These commands disable the SNMP service of the device. However, disabling SNMP affects service discovery and the port monitoring mechanism that uses SNMP to obtain device status.
■ Red Hat Linux
For Red Hat Linux, you can use Linuxconf to delete the SNMP service from the automatically started service list, or directly Delete the line that starts the SNMP service from the/etc/services file. For other Linux systems, the operation methods should be similar.