topic Looking for David Claypool or Rob Buxton in Server Management - Systems Insight Manager

Looking for David Claypool or Rob Buxton

Mike Ng — Mon, 13 Feb 2006 20:30:07 GMT

Hi,

I am using both Win2K and Windows 2003 for my managed system. Under Services, SNMP Properties, Agent tab. There are options for

Physical
Applications
Datalink and subnetwork
Internet
End-to-end

Can u give insight into this few option. Thanks.

My purpose is for security reason, and will check only the bare minimum. Pls see attached file.

Let say, INTERNET is checked (specifies whether this computer acts as an IP gateway (router).

With this option checked, all TCP/IP traffic can make use of this server to pass thru traffic, which is what we do not want as it impact performance and for security concern (hacking).

Can u give insight into this few option and what impact if uncheck it.

Thanks.

Re: Looking for David Claypool or Rob Buxton

Rob Buxton — Tue, 14 Feb 2006 14:11:58 GMT

Mike,
I'm just a user of HPSIM, I'm not an expert in all these related items.
I've never touched the options mentioned.

It got me curious and I did a bit of googling, but there doesn't seem to be much available that describes what these options control.

I would have thought that the options just related to SNMP, not to all TCPIP Traffic. And you can restrict what hosts can access your Server and by what community name.

Re: Looking for David Claypool or Rob Buxton

David Claypool — Tue, 14 Feb 2006 15:20:30 GMT

In my experience, checking them all or unchecking them does not change any HP SIM behavior. Maybe some SNMP expert can chime in.

Re: Looking for David Claypool or Rob Buxton

Craig McK — Wed, 15 Feb 2006 11:45:15 GMT

I'm certainly no expert, but I believe these options are just to specify the function of the SNMP device - The following is an extract from an old Microsoft article:

Choose the Physical option if the Windows NT computer manages a physical device, such as a repeater (Windows NT can be used as an embedded system).

Choose the Applications option if the Windows NT computer runs TCP/IP applications, such as FTP. This option should be selected for all Windows NT computers.

Enable the Datalink/Subnetwork option if the Windows NT computer manages a datalink device, such as a bridge or TCP/IP subnetwork.

Check the Internet option if the Windows NT computer acts as a router (also called IP gateway).

Check the End-to-End option if the Windows NT computer acts as a host (called end-system in the OSI model). This option should be selected for all Windows NT computers.
-=-=-=-=-
I don't think enabling them is a security risk as it's purely for monitoring.

Full article is here:
http://www.microsoft.com/technet/archive/winntas/maintain/featusability/networkm.mspx