More that 1 server on 1 IP adress HPSIM

[Ondernul]

Hello,

I will try to scetch the setup i want. and what i can do already.
I am working for a company that is responsible for maintaining and servicing HP servers a remote sites in the server rooms of the client companies. What we want is to monitor the hardware (and software) health status of these servers so in case of HD failure we can act on it before the server fails completely.
What i have done is ik have build an HPsim server 6.2 When i open up the ports to te server on the remote network i can monitor the on server that te ports are forwarded to. But i can not monitor the other 1,2,3,4,5 or more servers on that location. i've been looking into an WMI proxy but doesnt know how to configure it. And maybe there is a better solutions.
Is there some here that can help me?

Thanks in advance

peter

[Ondernul]

See the image attached to first post for visual information.

[David Claypool]

It looks like you are trying to access devices behind an internet router that are using network address translation, and that is not possible. HP SIM has no way of doing that; it needs direct visibility of the devices themselves. Secondly, you are putting your clients' networks at undue risk by trying to open up insecure management ports in their firewalls.

You have 3 options:

- Replace the router at the customer site with a router that supports VPN so that you can establish a secure connection to that site. There are devices designed for the SOHO market that are available for around $100
- Use the agents' "Event Notifier" that will send an email on an event rather than an SNMP trap
- Install an instance of HP SIM at each remote site

[Ondernul]

Well the way i've read it is that HPSIM uses WBEM to communicate. And this is (the way i see it) an secure (https) communication method. i am not sending snmp paint over the internet no.

[David Claypool]

"Secure communication" is only as secure as the latest patches to OpenSSL. Regardless, one of the purposes of NAT is to mask the visibility of addresses behind the router/firewall, and it does a good job. This prevents HP SIM and products like it from seeing them.

[Ondernul]

Yes i know..
but when you read the documentation of HPSIM managing behind a firewall..
You can see that there is a construction of WBEM and WMI proxy mappers.

Look at page 8 of this PDF file.
http://h10018.www1.hp.com/wwsolutions/misc/hpsim-helpfiles/MANAGINGHPServers-withHPSIM.pdf

[David Claypool]

Yes, example is a DMZ in a corporate network and NAT is not employed. Does not involve exposing management protocols to the internet.

[Ondernul]

Yes that is true. But when i open up the ports to the first server in the customer network. And install al proxy mapper on that machine... than i can use that to gather data using WMI from other servers? the smae way that i can do with a DMZ?
If not please inform me why not.

[David Claypool]

Again, the big problem is NAT.

http://en.wikipedia.org/wiki/Network_address_translation

"NAT obscures an internal network's structure: all traffic appears to outside parties as if it originated from the gateway machine."

So regardless of what you do, the individual machines on the other side will be blind to HP SIM.

[Ondernul]

Ok. sow there is no way to do this...
I think i fail to underestand how WMI proxy mapper works in combine with HPsim.

How about HP remote insight manager. Is this a solutions for what i want..?

[Ondernul]

And if not. What tools are there to monitor the servers at our custommers locations over the internet?