HP ilo4 monitoring

[ls440]

Hi all,

I would like to monitor HP ilo4 via snmpwalk But I always get no response from the device. Could you please let me know the OID for the DL380 G9 to use with it ? I have used the below two OIDs unfortunately it doesnot work.

1.3.6.1.4.1.232.6.2.6.8.1.4.0.1

.1.3.6.1.4.1.232.6.2.6.7.1.2.0

[pchops]

The default SNMP settings for the iLO enables "Agentless Management" by default, so the iLO responds to SNMP queries (versus passing them to the host operating system). However, in this mode, you need to configure the SNMP settings, with a "Read Community" string (ie: "public") at a minumum, otherwise you'll get a "No Response from ...". See this document for the details:

https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-a00045551en_us

[ls440]

Hi yes, I have defined the Agentless Management with read community public. But still I get the same error. 

[pchops]

From my, albeit limited, experience, the only change required from the iLO defaults is to add a "Read Community" string (which you have done already). Are you using a non-standard SNMP port, or is there some other blocking (ie: firewall rules) happening on the host or somewhere on the network?

If you have "nmap" installed, you could try running the "snmp-brute" script to see what it returns, ie:

# echo "public" > foo
# nmap -n -sU -p161 --script snmp-brute --script-args snmp-brute.communitiesdb=./foo {ip-address}
Starting Nmap 7.93 ( https://nmap.org ) at 2022-09-02 05:21 EDT
Nmap scan report for {ip-address}
Host is up (0.00045s latency).

PORT    STATE SERVICE
161/udp open  snmp
| snmp-brute:
|_  public - Valid credentials
MAC Address: 38:63:BB:nn:nn:nn (Hewlett Packard)

Nmap done: 1 IP address (1 host up) scanned in 0.87 seconds

[ls440]

I can see the port is open. I will one check if the firewall is blocking the port. 

Host is up (0.038s latency).

PORT STATE SERVICE
161/udp open|filtered snmp

Nmap done: 1 IP address (1 host up) scanned in 10.88 seconds

[pchops]

---

I can see the port is open. I will one check if the firewall is blocking the port. 

PORT STATE SERVICE
161/udp open|filtered snmp

---

According to the nmap man page, the state "open|filtered" has some significance that might explain what you are seeing:

... Filtered means that a firewall, filter, or other network obstacle is blocking the port so that Nmap cannot tell whether it is open or closed ... Nmap reports the state combinations open|filtered and closed|filtered when it cannot determine which of the two states describe a port ...

[ls440]

Now the snmp port is open, but when i check for snmp i get the below

snmpwalk -v3 -c public -u secname -l authPriv -A passwd -a MD5 -X authenticationpasshrase -x DES hostname

snmpwalk: Authentication failure (incorrect password, community or key)

I am not sure whats wrong

[pchops]

Maybe double check your settings? FWIW, this configuration works for me (but of course, don't use these exact settings outside of testing):

# snmpwalk -v3 -u secname -l authPriv -A authenticationpasshrase -a MD5 -X privacypasshrase -x DES {ip-address}
SNMPv2-MIB::sysDescr.0 = STRING: Integrated Lights-Out 4 2.78 Apr 28 2021
SNMPv2-MIB::sysObjectID.0 = OID: SNMPv2-SMI::enterprises.232.9.4.10
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (71498664) 8 days, 6:36:26.64
SNMPv2-MIB::sysContact.0 = STRING:
SNMPv2-MIB::sysName.0 = STRING: {system-name}
SNMPv2-MIB::sysLocation.0 = STRING: unknown

[ls440]

it works now for me, but now i would need to monitor hardware via snmpwalk. is this possible. When i snmpwalk with one of the OID it displays me Interger values, but not sure if the hardware is okay or not

iLO_fans
iLO_memory_modules
iLO_physical_drives
iLO_power_supply
iLO_storage_controller
iLO_temperature