We aren't on 8 yet, but I do have SNMPv1 disabled on all iLOs. Did it with this code. First get session credentials to OneView. Then pull down a list of all hardware in OneView:
# We have multiple sites. So, I set a site variable so that I can run the same commands
# simultaneously in multiple terminals.
SITE='<site name>'
HARDWN=hardw-${SITE}
curl --insecure \
--header "X-API-Version: ${currentVersion}" \
--header "auth: ${sessionID}" \
--output ${HARDWN} \
--request GET ${OneView}/rest/server-hardware?start=0&count=-1
#
# That only pulls down 32 devices. Pull down the rest with:
i=1
NEXT=$(/bin/sed -e 's|^.*nextPageUri":"\(/rest/server-hardware.*\)","prevPageUri.*|\1|' ${HARDWN})
while [[ ${NEXT} != *"null"* ]]; do
curl --insecure \
--header "X-API-Version: ${currentVersion}" \
--header "auth: ${sessionID}" \
--output ${HARDWN}${i} \
--request GET ${OneView}${NEXT}
NEXT=$(/bin/sed -e 's|^.*nextPageUri":"\(/rest/server-hardware.*\)","prevPageUri.*|\1|' ${HARDWN}${i})
if [[ ${#NEXT} -gt 50 ]]; then
NEXT=$(/bin/sed -e 's|^.*nextPageUri":"\(.*\)","prevPageUri.*|\1|' ${HARDWN}${i})
fi
((i++))
done
# Concantenate into a single file.
j=0
while [[ ${j} -t ${i} ]]; do
echo ${j}
if [[ ${j} -eq 0 ]]; then
CMD="cat ${HARDWN}"
else
CMD="${CMD} ${HARDWN}${j}"
fi
((j++))
done
$(echo ${CMD} > hardw-all-raw-${SITE})
cat hardw-all-raw-${SITE} | jq -r '.' > hardw-${SITE}-all
HARDW=hardw-${SITE}-all
/bin/rm hardw-${SITE} hardw-${SITE}? hardw-${SITE}[1-9]? hardw-all-raw-${SITE}
Then make sure SNMP is enabled, disable SNMP v1, and reset the iLO interface:
# Get OneView session credentials
# Pull down a list of all current hardware. Set the variable, HARDW, to the downloaded list.
# Set three JSON variables
echo '{"SNMP": {"ProtocolEnabled": true }}' | jq -c '.' > snmp
echo '{"SNMPv1Enabled": false }' | jq -c '.' > snmpv1
echo '{"Action": "Manager.Reset"}' | jq -c '.' > resetiLO
#
for SERVER in $(jq -r '.members[] | "\(.name)"' ${HARDW}); do
UUID=$(jq -r '.members[] | select(.name=="'${SERVER}'") | "\(.uuid)"' ${HARDW})
read iLOSSO iLOAuth <<< $(curl --silent --insecure --header "X-API-Version": ${currentVersion}" \
--header "auth: ${sessionID}" \
--request GET ${OneView}/reset/server-hardware/${UUID}/remoteConsoleUrl | \
jq -r '.remoteConsoleUrl' | sed -e 's|hplocons|https|' -e 's|addr=||' \
-e 's|^\(.*\)&sessionkey=\(.*\)$|\1 \2|')
curl --silent --insecure --include \
--header "X-Auth-Token: ${iLOAuth}" \
--header "Content-Type: application/json" \
--location --data "@snmp" \
--request PATCH ${iLOSSO}/redfish/v1/Managers/1/networkprotocol
curl --silent --insecure --include \
--header "X-Auth-Token: ${iLOAuth}" \
--header "Content-Type: application/json" \
--location --data "@snmpv1" \
--request PATCH ${iLOSSO}/redfish/v1/Managers/1/SnmpService
curl --silent --insecure --include \
--header "X-Auth-Token: ${iLOAuth}" \
--header "Content-Type: application/json" \
--location --data "@resetiLO" \
--request POST ${iLOSSO}/redfish/v1/Managers/1/Actions/Manager.Reset
done
