topic Re: Hardware/software status polling in Server Management - Systems Insight Manager

Hardware/software status polling

Mark Hagon — Fri, 15 Dec 2006 06:10:28 GMT

I have a SIM 5.0 SP5 server that I would like to manage servers in a DMZ. I believe I've opened all the necesary firewall ports. SIM can see the hardware status of the server, but not software. When I run the hardware/software status polling I can sniff the traffic and I see an initial ping and then nothing else. When I try this on a server in the same domain (and not behind a firewall) I then see SNMP traffic initiated from SIM. Is this due to a lack of SNMP configuration on the DMZ server (which is standalone and not in the domain), or is it related to permissions, i.e. it's not in the domain?

Re: Hardware/software status polling

Steve Weeks_1 — Fri, 15 Dec 2006 09:02:02 GMT

if you don't have the SNMP config correct, there's no chance of it working, whether it's inside or outside the DMZ

Re: Hardware/software status polling

Mark Hagon — Fri, 15 Dec 2006 09:43:48 GMT

I would like to think that the SNMP config in SIM is OK, as it works in the domain, just not for the DMZ server.

Is there a particular location that I should check, and would this be on the SIM server or the DMZ server?

Re: Hardware/software status polling

Steve Weeks_1 — Fri, 15 Dec 2006 10:15:00 GMT

Admin tools / Services / SNMP.

you want trap desitnation and community string configured on the server in the DMZ

Re: Hardware/software status polling

Mark Hagon — Mon, 18 Dec 2006 08:45:12 GMT

I have checked the configuration of the SNMP service, but additional Googling by a colleague for the issues that I'm having brought up a couple of articles.

I need to allow TCP port 2301 from the DMZ server to the SIM server that's also running the VCR. This isn't documented in the Managing HP servers through firewalls with HP Systems Insight Manager document.

Links to two forum articles showing this:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1082258&admit=-682735245+1166448920320+28353475

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=887652&admit=-682735245+1166448948828+28353475

Anyway, firewall change on its way...

Re: Hardware/software status polling

Mark Hagon — Wed, 20 Dec 2006 10:35:32 GMT

The firewall change has worked. All I need to test now is to whether I can push a PSP from SIM to a DMZ server.

This forum link provides the best information so far:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1002715

Re: Hardware/software status polling

Mark Hagon — Wed, 14 Feb 2007 09:28:01 GMT

I now have this working. Whilst I can't access the VCA of a DMZ server, I'm not too bothered. I expect that it's firewall related.

I have also tested and I can deploy software and firmware from SIM. I don't think I can deploy a PSP, but given that my standard hardware build process includes installing a PSP that doesn't matter.