topic Re: ICMP DISABLED in Server Management - Systems Insight Manager

ICMP DISABLED

John Vitiello — Tue, 06 Jan 2004 13:13:25 GMT

ICMP is turned off in some of our reginal areas. I setup the hardware status polling task to only use SNMP and this works great. The only problem is that the Status Icon for the server still shows RED under Ping and Green under SNMP and Management Agents. Is there a way to show the server status as green if the requested management method (SNMP in this case) is working properly?

Re: ICMP DISABLED

Scott Shaffer — Tue, 06 Jan 2004 17:05:42 GMT

Unfortunately HP SIM currently requires ICMP to be enabled to work. However, this is something we are seriously investigating now - look for a near future version to add some capbilities in this area and for us to extend this over time.

Re: ICMP DISABLED

Scott Shaffer — Wed, 07 Jan 2004 12:18:06 GMT

When ICMP is disabled, I would assume some other managment protocols are still being allowed, such as UDP for SNMP and TCP for some ports. If HP were to modify HP SIM to have the option to not use ICMP for automatic discovery and reachability of a system there would be a loss of functionality. To avoid this, we could use alternate protocols to achieve similar functionality. For instance we could use TCP to try to connect to a port configured by you and based on errors returned detect if the system was offline or not. The question I would have is would this still be enabled on the network or are most all protocols being blocked by either the routers, switches and possibly a built-in firewall on the server? Or will say TCP ports 2301 for the web agent management still be allowed on the network?

Assuming that at least one or two TCP ports are enabled, would they be the same ports for all systems, or will some systems have one set of ports and a different set have different ports enabled?

Re: ICMP DISABLED

John Vitiello — Mon, 12 Jan 2004 09:51:32 GMT

Sorry for the late reply, I was out of town. Due to the wonderful MS vulnerabilities we turned off ping replies specifically :-) SSL, HTTP, Telnet and FTP ports are open across our internal networks.

Re: ICMP DISABLED

Jadrice Toussaint — Mon, 12 Jan 2004 13:52:20 GMT

Scott -

I know thiswill create a lot of overhead on the SIm server side, but why not just use snmp for device statuses and discoveries? It will take longer during the discovery and polling processes but that should eliminate the use of ICMP if nto wanted.

Re: ICMP DISABLED

John Vitiello — Mon, 12 Jan 2004 14:47:30 GMT

That is what I have done as a work around. The problem is that I can't get the device to turn green (for overall monitiring purposes)in SIM due to the failure of the original ping failure.

Re: ICMP DISABLED

Scott Shaffer — Mon, 12 Jan 2004 15:53:37 GMT

We could use SNMP, but we were looking for something more uniquitous that could be used as a quick up/down poll.

Re: ICMP DISABLED

Jadrice Toussaint — Mon, 12 Jan 2004 16:01:36 GMT

Will the Disk Space threshold issues that I continue to have be addressed at the end of march?

Re: ICMP DISABLED

John Vitiello — Mon, 12 Jan 2004 16:25:53 GMT

I understand. If MS was a bit more secure we wouldn't be having this conversation :-) Thanks!