SNMP settings being overwritten

[Kevin Kelling]

We are observing that many Windows servers are getting their SNMP security settings overwritten.

Normally our servers are configured to "Accept SNMP packets from any host" on the Security tab for SNMP.

Something is changing this on most of our servers to restrict access to "0" and "127.0.0.1".

We are trying to isolate what may be causing this. We have SIM 4.2 SP2 (Windows) and also an old CIM32 console in our environment.

There is a Replicate Agent Settings task in SIM but we can not find any option in this task that would configure the "accepted hosts" option for SNMP Security.

The only setting we found under the Replicate Agent settings tool is "Accept Specific Hosts" which we have set to false.

We are unclear as to what the "Accept Specfic Hosts" option does, but we find it hard to beleive that this is cause -- especialy since we have it set to "false".

Two questions in summary:

1) What is the function of the "Accept Specific Hosts" option in the Repliate Agent Settings task when it is set to "false"?

2) Is there any known phenomenon that is known to cause security settings to be changed to restrict incoming SNMP to only "127.0.0.1" and "0"?


Trying to figure out what keeps changing these settings on an apparent daily basis. Not clear yet if the time of the change correlates to the Replicate Agent Settings task -- still trying to test and isolate.

Thanks!

[Troy Blewitt]

I haven't confirmed it but I've seen it commented that the latest versions of the Management Agents appear to cause this behaviour. Have no other info for you in regards to why, etc.