Community string Config

[Richard Layton]

Hello All,

I am setting up another dept. to access to thier servers through out Insight server. I don't want them to know out write community string but i don't know what effect not having the "default write community string" and only a "read community string". How will that effect them? Will they loose some functionality? Thanks

[David Claypool · Accepted solution]

hpSIM doesn't need a write community string at all really, since it never does any writing. It can get along with just a read string. Any 'transaction' that hpSIM does is not done through SNMP but through HTTPS.

However, the agents use SNMP to communicate among themselves, so you MUST have a READ-WRITE string named in the SNMP service. This can be different from the read string that hpSIM uses. Configured this way your string will only be used internally and never cross the wire.

[Joe_328]

Can anyone confirm the following please.

1. HP SIM communicates with managed systems/agents e.g. server/wk station via HTTPS.

2. "The agents use SNMP to communicate among themselves, so you MUST have a READ-WRITE string named in the SNMP service".

does this mean that the servers communicate amongs themselves on the agent level or the various agents encompassed within a PSP pack. (excluding HP SIM)?

I hope I am clear enough

Many Thanks

Joe

[David Claypool]

1. HP SIM communicates with managed systems/agents e.g. server/wk station via HTTPS.

HP SIM uses both SNMP and HTTPS. SNMP is used for status polling, data collection and events--all READ operations.

Any 'transaction' that HP SIM does with the agents, replicate agent settings, update software/firmware, all are performed with HTTPS.

2. "The agents use SNMP to communicate among themselves, so you MUST have a READ-WRITE string named in the SNMP service".

That is correct. For example, for the Version Control Agent on Server A to update the Insight agent on Server A as to its status, an SNMP write is done from one to the other. This happens internally and does not go out over the wire.

[Joe_328]

Thanks alot