Detected an unauthorized user attempting to access the SNMP interface from...

[BillP]

Hi!

We have a problem similar to those one:

http://forums.apc.com/spaces/5/smart-ups-symmetra-lx-rm/forums/general/1049/unauthorized-user-attemp...

http://forums.apc.com/spaces/7/ups-management-devices-powerchute-software/forums/general/12571/detec...

We are receiving the error: Detected an unauthorized user attempting to access the SNMP interface from

We did try all the suggestion in those ticket without luck. Any other suggestions?

Thank you!

[B-DoubleE_apc]

Hi Nicolas,

As part of the event, the NMC should give you the IP address that is trying to gain access via SNMP. Can you track down what that IP address belongs to? Is it a server or other device that you have access to?

[BillP]

Hi Matt,

Yes, it's a server, running Autotask agent. This server is configure to use the Community Name: public, as configure in the NMC.

Thanks,

Nicolas

[B-DoubleE_apc]

Hi Nicolas,

In that case, could there be multiple community names configured that the server is trying to access? Or possibly multiple versions of SNMP? If you can share with me the config.ini file from the NMC I can take a look to see what type of SNMP access the card is granting. You could either attach it to this forum post, or PM it to me direct. Instructions for downloading the config file can be found here: http://www.apc.com/us/en/faqs/FA156131/

[BillP]

There you go. Thanks!

[B-DoubleE_apc · Accepted solution]

Thanks Nicolas, got the files.

Something I noticed in the config file is SNMPv3 is configured for the IP that is causing the events, however SNMPv1 is also enabled and configured for the default settings - granting any IP access with the default community names of "Public" or "Private". Is your autotask agent configured for SNMPv1, v3, or both? If you're only trying to use one version of SNMP, then I would recommend disabling the other through the web interface - it's possible that this particular server has multiple SNMP agents that are trying to access the card.

[BillP]

Thank you Matt! Will try to disable v1 and see what is happening. I will keep you updated.

[BillP · Accepted solution]

Hi Matt. Just to let you know that disabling SNMP V1 solve the problem. Thank you very much for your help.

Nicolas

[B-DoubleE_apc]

Excellent, glad to hear it Nicolas!