topic Monitoring a server in a different building / network in Server Management - Systems Insight Manager

Monitoring a server in a different building / network

Mark Matthews — Fri, 26 May 2006 03:36:41 GMT

I am currently trying to setup HP SIM ver5 on our network in this building and get it to monitor a server in another building. Both buildings have PIX firewalls on the end of their networks.
I have made sure ports 161/162 (SNMP) are allowed in both directions on both FWs. Ive also done the same with port 2301 in both directions. But I cannot get the servers to see each other.
When I tell the managed server where the CMS is, do I need to use its (Statically mapped) public IP address or its Private IP address?
Do I need to open up any more ports?
Is there a whitepaper on monitoring servers over a WAN link?
Can anyone help?

Thanks in advance
Mark Matthews...

Re: Monitoring a server in a different building / network

Andrzej Kowalik — Fri, 26 May 2006 04:27:43 GMT

On page 13 you can find port listing for HP SIM:
http://h10018.www1.hp.com/wwsolutions/misc/hpsim-helpfiles/hpsim_5_Security.pdf

regards,
Andrzej Kowalik

Re: Monitoring a server in a different building / network

Mark Matthews — Fri, 26 May 2006 04:41:27 GMT

Thanks Andrzej,

Jeez, thats a whole lot of ports!
Looks like I'll be reconfiguring firewalls all day then!
Any ideas on which IP address to point the managed server to? (the public or private?)

Thanks again
Mark...

Re: Monitoring a server in a different building / network

Andrzej Kowalik — Fri, 26 May 2006 05:03:07 GMT

Strange question - I never saw before Management server on public address.

Re: Monitoring a server in a different building / network

Andrzej Kowalik — Fri, 26 May 2006 05:12:15 GMT

If anyone force your firewall\security and gain access to your Management server - you loose all your network - via SIM\SNMP settings burgler can access (or destroy) all other servers.

Re: Monitoring a server in a different building / network

Mark Matthews — Fri, 26 May 2006 05:35:26 GMT

The management server does have a private IP address, but it needs to be statically translated to a public IP (in the PIX config) in order to be seen outside the network.
So I guess I may have just answered my own question! I'll need to use its Public IP from the other network.

Re: Monitoring a server in a different building / network

Mark Matthews — Tue, 30 May 2006 05:09:11 GMT

Ok,
After opening a multitude of ports on both FWs, I can now see the server in the other building through SIM.
However the HW Status is just showing as Unknown, and the IP address of it isnt showing up, but the name is.
I have just updated SIM 5 to SP4 but its the same problem.

Any ideas?

Re: Monitoring a server in a different building / network

jim goodman — Wed, 31 May 2006 11:34:17 GMT

Mark have you looked at this document?

ftp://ftp.compaq.com/pub/products/servers/management/hpsim/ManagingHPServers-withHPSIM.pdf

- Jim

Re: Monitoring a server in a different building / network

Mark Matthews — Thu, 01 Jun 2006 03:10:01 GMT

Thanks for that Jim,
I hadnt seen that doc, but I have seen the one that Andrzej pointed out and I have opened all the ports mentioned in that doc and it still isnt working properly...