How to turn off SNMP v2 on HP DL 380 G 5, 6 and 7 ?

[Server-Support]

Hi All,

Does anyone know how to turn off SNMP v2 as it impose a security issue according to the security auditor/consultant. Alternatively SNMPv3 is recommended instead.

I went to the iLO -3 page but cannot find it.

Thanks.

[Matti_Kurkela]

iLO versions 1-3 don't have an independent SNMP stack - they just have a SNMP pass-through facility, which forwards incoming SNMP queries to the SNMP agent in the server OS. So if you configure the server OS to respond only to SNMP v3, the iLO should only respond to SNMPv3 too.

See the end of page 24 of this document (HP iLO security whitepaper):

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00212796/c00212796.pdf

iLO4 is different: it has a complete SNMP implementation of its own, to allow agentless management.

[Server-Support]

So in this casethere is now way to disable SNMPv1/2c authentication and reconfgure the server to accept SNMP version 3 authentication ?

[xmate · Accepted solution]

You can use SNMPv3 instead of v2 or v1.

Server uses SNMP service installed in your operating system. iLO doesn't have it's own SNMP service in HP DL 380 G 5, 6 and 7.

You should install SNMPv3 in the OS. Some operating systems don't support snmp v3 natively, so you may need to install some third-party solution for snmp v3.

[Server-Support]

Cool, thanks for the advice xmate !