SNMP settings...

[Josh S.]

Ok, I have tried to get through all the documentation.

I have looked on the forums, but...

Can someone please explain what is needed exactly for snmp between SIM and managed systems?

Is there a simple check list instead of a 700 guide?

Your help is appreciated.

Josh

[David Claypool]

HP SIM's 'Configure or Repair Agents' will correct all of your SNMP settings automatically to have communications correct between the HP SIM central management server and the target device. It will:

- Establish an SNMP Read-Only string known to HP SIM if it doesn't already exist
- Establish a random and long Read-Write string needed for intra-agent communication if one doesn't already exist; this string never is used over the wire so there's no danger of sniffing it
- Will set the HP SIM server as a trap destination
- Will establish a certificate trust relationship (non-SNMP) between the CMS and the target device

[Josh S.]

Thanks for the reply.

If we already have a string we would like to use, then do I make that the read only string or the read-write string or should I let it auto create the read-write string on every machine

What about read-create? In the Insight agents guide it says you have to have a read-create string too.

"NOTE: HP Insight Management Agents must have at least one community string predefined with READ-CREATE
rights. Additionally, the HP Insight Management Agents must have sets enabled. To enable sets, select
Control Panel>Management Agents."

[David Claypool]

Read-Create is something that exists only in Windows and according to Microsoft is functionally equivalent to Read-Write. There is no special function.

[Josh S.]

I removed all strings from the target system and re-ran 'configure and repair agents'just for the SNMP information.

It completed successfully and added the strings the way you said they would.

However, when I run identification this is the output.

Starting identification process...
Checking for known running web servers.
Checking for System Management Home Page and other HP web agents.
Received a response from the system management homepage, this system supports SM
H.
Checking for WBEM support on system.
This system does not have any SMI-S CIMOM installed
This system doesn´t have a server CIMOM installed, or cannot connect to it using
all credentials specified
Running WBEM rules based identification.
Cannot get ComputerSystem WBEM/WMI data from the system
Running WS-Man identification.
Checking for SNMP support on system.
The system did not respond to SNMP, verify security settings and community strin
gs.
Running SNMP base Cluster identification using common cluster MIB.
This was not a system with the common cluster MIBs supported.
Running HP ProLiant management agent identification
The system does not support SNMP.
Running HP NetServer identification.
The system does not support SNMP.
Running HP-UX SNMP identification.
The system does not support SNMP.
Running SNMP System Type Manager identification.
The system does not support SNMP.
Checking for DMI protocol support.
The system does not have Windows DMI support.
Running DMI System Type Manager identification.
The system does not have Windows DMI support.
Running HP-UX DMI identification.
The system does not have HP-UX DMI support.
Running HP/Compaq Desktop identification.
The system does not have Windows DMI support.
Running HP DMI Desktop identification.
The system does not have HP DMI Desktop support.
Running Generic DMI identification.
The system does not have Generic DMI support.
Checking for SSH protocol support.
The SSH protocol is not supported on this system
Running Storage identification.
Did not detect WBEM support on this system. Will not attempt storage identificat
ion. If this is a storage host, check WBEM credentials and make sure the provide
rs and CIMOM are operational on the host.
Storage identification completed.
Running HP Service Guard Identification.
The system is not part of HP Service Guard cluster
idPluginStart.IPMCompatible
Running VM identification.
Checking for license data on system.
SMH trust status is true.
Running limited data collection for common attribute.
Done with limited data collection, checking retrieved data.
Building system relationships.
System identification done with this system.

Stderr: None


Any ideas?

Thanks,

Josh

[David Claypool]

If these are Windows Server 2003 systems, make sure that the default to only respond to localhost has been changed to either any host or the SIM server specifically...

[Josh S.]

Yes, this is a 2003 box. All of our systems are Windows except for a 2 system ESX cluster which hosts Windows VM's. The rest of the physical boxes are Proliant's or blade systems, with EVA and MSA storage.

Moving on here are the SNMP settings after the repair was run.

In SMH of the managed system...

Under SNMP and Agent Configuration...

SNMP Agent configuration has blank for Contact Location and for Service only Application, Internet, and End to End are checked; Physical and Datalink/Subnetwork are unchecked.

Security configuration shows community strings for the unique SIM created read-write string(index value=1) and the global read-only string (index value=2). The accepted hosts are the SIM server hostname, localhost (literal), and 127.0.0.1
The send authenication trap box is checked.

Traps configuration contains the read-only string with the SIM server as the destination and the index column says one(do not know if this value is significant, just including it)

Management Agents configuration has the value of Server for the Server Role, 2 minutes for the Data Collection Interval, SNMP Sets are Enabled, and Remote Reboot is Disabled.

[David Claypool]

You have to look at the SNMP service on the machine using [Start] --> Administration Tools --> Services --> SNMP. Under the Security tab, look at the lower half. There are 2 radio buttons: Accept SNMP packets from any host /or/ Accept SNMP packets from these hosts.

By default, Windows Server 2003 (when not installed using SmartStart or RDP) is set to only respond to localhost. It needs to include the HP SIM CMS at minimum, so add that.

[Josh S.]

The settings that I posted before from the SMH SNMP agent page, are the same when I look up the SNMP service properties.

Accept packets from: SIM, localhost, 127.0.0.1

Thanks,

Josh