system management homepage only works local

[Alan Ballew]

I'm trying to get a Windows 2003 server that someone else configured, tied into SIM. The system managemen home page works fine from the local console, but SIM says there is no page and if I try to access it directly from a browser it times out and says there is no site. Any ideas what might be shutting down https?

[Daniel Leblanc]

Tip on getting help in HP forum APPLY YOU'RE POINTS .

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=963388

The points are situated next to every message in a thread,it to date and time as UNASSIGNED.

I know you re answer you re only letting localhost passing, you need apply you insight server the right to see it.

Daniel

[Alan Ballew]

Where do I set that? It isn't just SIM, but browser access as well.

[Daniel Leblanc]

APPLY YOU RE POINTS

Oct 23, 2007 17:51:26 GMT Unassigned

The section <> from 0 to 10

When you return to view the answer, please rate it by assigning points on a scale of 1-10. To assign points, simply login and click the dropdown points menu next to each reply. Use the following scale when rating a response:

N/A: The reply was a clarification to my original question
1-3: The answer didn't help answer my question, but thanks anyhow!
4-7: The answer helped with a portion of my question, but I still need help.
8-10: The answer has solved my problem completely! I'm a happy camper!

WHY SHOULD YOU DO THIS?
There are 3 reasons why we feel rating replies is such an important feature:

1.) Others have taken time to help you, so please give them credit for their help.
2.) Your rating will help your peers earn points toward their Forums status, and you will validate the quality of the solution you've received.
3.) Other readers will understand which answer best solved a problem, enriching the community knowledge being shared.

[Alan Ballew]

Ok, I've applied points - this is my first question on this forum and so far the only "answers" I have gotten have been nagging me about not knowing the protocols. Having gotten no information which was of any use to the problem I came here to ask about, it's a bit difficult to see that any "points" need to be applied.

[Daniel Leblanc]

this configuration is a 100% fonctionnelle and secure

1 All you re server SNMP setting are set for TRAPS>Communite name(correc name),TRAPS>Communite name>traps destination> 1-server Insight & 2-127.0.0.1

#2 All you re server snmp setting are set for SECURITE> Accepted community name>Communite name(correc name),All you re server snmp setting are set for SECURITE> Accepted community name>Communite name> Accepted packet from these host>1-server Insight & 2-127.0.0.1.

3# in youre Home page manegement>Setting>Securite
A_IP Binding-Nothing
B_IP Restricted Login-Nothing
C_Local Server Certificate-Nothing
D_Local/Anonymous Access-Nothing
E_Trust Mode>Secure Trust Modes:Trust by Certificate
F_Trusted Management Servers>Importe you Insight server certificate
G_User Groups-Nothing.

[Daniel Leblanc]

You can add this to it to make you snmp communication secure!

http://support.microsoft.com/kb/324261

[Alan Ballew]

SNMP is working fine, test traps are showing up in SIM instantly. The problem is access to the SMH from anywhere other than the local console. I can get to it just fine using RDP to that server, but https://servername:2381 or https://ip.add.res.s:2381 gets a timeout. Something is shutting down https from that server. There are no firewalls between the systems and all servers are in the same GPO.

The settings were just as you suggested, and I even removed and reinstalled SMH with those settings. Still nothing.

'tis a mystery.

[Carlsberg · Accepted solution]

Wild quess ,
Your default GPO is turning the local windows firewall on, which is blocking the traffic.

Type netsh fi sh o
on a command prompt and check the status of the firewall.

[Eugene Marko]

Hello,

Have the same issue with some Windows servers.
You need to check is SMH listening on external interfaces
In output of "netstat -na" should be lines like these:
TCP 127.0.0.1:2381 0.0.0.0:0 LISTENING
TCP 192.168.1.1:2381 0.0.0.0:0 LISTENING

If you have only 127.0.0.1 as listening interface - then you need to restart windows SMH service. I'm still don't know why it happens, but I need to restart SMH service after each server reboot to force listening on all network interfaces.

This can be your issue too.

Regards,
Eugene Marko.

[Daniel Leblanc]

Did you verify #3 ,Trust mode ,we're you able to get cert of you're sism server?

[Daniel Leblanc]

Did you verify #3 ,Trust mode ,we're you able to get cert of you're sim server?

[Alan Ballew]

"Wild quess ,
Your default GPO is turning the local windows firewall on, which is blocking the traffic.

Type netsh fi sh o
on a command prompt and check the status of the firewall."

Ding, ding, ding, ding, ding!!!

The default GPO wasn't actually turning the firewall on, but it wasn't turning it OFF, either. I thought it did, but when I checked I realized that I was turning it off manually as part of my normal setup process. What tripped me up was that this server came in the door pre-configured running an Avaya voicemail system - I just took the setup as-is and didn't check it.

Once I turned it off, the server started listening on the right ports and everything started working.

Carlsberg, Eugene, Daniel - THANKS!!!