Hardware/software status polling

[Mark Hagon]

I have a SIM 5.0 SP5 server that I would like to manage servers in a DMZ. I believe I've opened all the necesary firewall ports. SIM can see the hardware status of the server, but not software. When I run the hardware/software status polling I can sniff the traffic and I see an initial ping and then nothing else. When I try this on a server in the same domain (and not behind a firewall) I then see SNMP traffic initiated from SIM. Is this due to a lack of SNMP configuration on the DMZ server (which is standalone and not in the domain), or is it related to permissions, i.e. it's not in the domain?

[Steve Weeks_1]

if you don't have the SNMP config correct, there's no chance of it working, whether it's inside or outside the DMZ

[Mark Hagon]

I would like to think that the SNMP config in SIM is OK, as it works in the domain, just not for the DMZ server.

Is there a particular location that I should check, and would this be on the SIM server or the DMZ server?

[Steve Weeks_1]

Admin tools / Services / SNMP.

you want trap desitnation and community string configured on the server in the DMZ

[Mark Hagon]

I have checked the configuration of the SNMP service, but additional Googling by a colleague for the issues that I'm having brought up a couple of articles.

I need to allow TCP port 2301 from the DMZ server to the SIM server that's also running the VCR. This isn't documented in the Managing HP servers through firewalls with HP Systems Insight Manager document.

Links to two forum articles showing this:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1082258&admit=-682735245+1166448920320+28353475

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=887652&admit=-682735245+1166448948828+28353475

Anyway, firewall change on its way...

[Mark Hagon]

The firewall change has worked. All I need to test now is to whether I can push a PSP from SIM to a DMZ server.

This forum link provides the best information so far:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1002715

[Mark Hagon]

I now have this working. Whilst I can't access the VCA of a DMZ server, I'm not too bothered. I expect that it's firewall related.

I have also tested and I can deploy software and firmware from SIM. I don't think I can deploy a PSP, but given that my standard hardware build process includes installing a PSP that doesn't matter.