APC UPS Data Center & Enterprise Solutions Forum
Schneider, APC support forum to share knowledge about installation and configuration for Data Center and Business Power UPSs, Accessories, Software, Services.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:10 AM . Last Modified: 2024-03-05 10:23 PM
Dear all,
My company has one UPS model Smart-UPS RT 10000 RM XL and use Network Managerment Card to control and monitor it.
Everything work fine and i can receive the report or notification about UPS when it got issue (like no power, selftest, ...). But sometime i get many emails with detail like that:
System: Detected an unauthorized user attempting to access the SNMP interface ........
First, I find in Webportal of UPS the logs and found this issue happen by 3 IP below:
- 196.34.139.65 (with this IP, i really don't know this ip assign for which device).
- 10.73.15.108 -> PC to monitor all device (HP Printer, UPS, ...). On this computer, i install HP Webjet admin to monitor HP Printer.
- 10.73.5.177 -> The old printer server
The second step i find the reason why 3 PC looking for something in this UPS.
On the PC install HP Webjet Admin, i start discovery new device on network. After that, UPS start send email for me, too.
Please tell me how can i disable this reports or the way to resolve this issue. Thank you !
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
It looks like SNMP probing is key to Jetadmin's device discovery process:
HP Web Jetadmin Software - Device Discovery FAQ - c01718860 - HP Business Support Center
so disabling the alert seems to be the way to go.
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
Yes, I believe so!
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
Dear Angela N
I setting in Administration > Network > SNMP like this
But after save this setting, i still get the email report like this:
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
Are the more recent email notifications at the top or bottom? I see the alerts where you edited the address and community so I am going to assume the more recent events are at the top (from the one from 10.73.5.177).
If this is not working, you'll need to review the other options we've outlined.
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
Hi,
Every time I change the SNMP setting, i alway receive 2 email alert about it. Then, there are many emails come from another IP. And it is continuous ,
At this moment, i changed my setting to default setting and accept sometime i receive email alarm about System: Deteced an unauthorized user attemping to access the SNMP interface.
Maybe, i will remove this alarm from setting but i need to my manager accept that.
Thank you for your support !
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
Dear all,
My company has one UPS model Smart-UPS RT 10000 RM XL and use Network Managerment Card to control and monitor it.
Everything work fine and i can receive the report or notification about UPS when it got issue (like no power, selftest, ...). But sometime i get many emails with detail like that:
System: Detected an unauthorized user attempting to access the SNMP interface ........
First, I find in Webportal of UPS the logs and found this issue happen by 3 IP below:
- 196.34.139.65 (with this IP, i really don't know this ip assign for which device).
- 10.73.15.108 -> PC to monitor all device (HP Printer, UPS, ...). On this computer, i install HP Webjet admin to monitor HP Printer.
- 10.73.5.177 -> The old printer server
The second step i find the reason why 3 PC looking for something in this UPS.
On the PC install HP Webjet Admin, i start discovery new device on network. After that, UPS start send email for me, too.
Please tell me how can i disable this reports or the way to resolve this issue. Thank you !
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
These three IP addresses apparently have SNMP capability so you'd have to research in order to how to disable it on those particular devices. Or maybe they have a program installed doing it. They must be periodically doing scans or SNMP requests periodically somehow.
Before disabling the notification, you could change the NMS IP/Hostname settings on your SNMP configuration so that it does not allow every IP address (assuming it is at default) to try and access the device. See my screenshot below (assuming you have the same firmware as me - if you don't let me know). You can read the help file on how to configure this screen (click help on the top right next to log off for context sensitive help) and lock down your SNMP settings.
Keep in mind disabling the notification won't solve the issue and more just cover it up. I'd definitely research what is going on with those three machines in an attempt in stopping the SNMP scan traffic since if these devices continue doing it frequently, it could cause performance issues with the Network Management Card in some instances if it keeps getting unnecessary SNMP traffic very frequently. Alternatively like I said, change around your SNMP settings on the management card per the help file.
If you want to disable the alert while you are researching the issue, you can disable it. I will assume you have the older v3.X.X or v5.1.X firmware depending on your model of network management card. Assuming this, you could go to Administration->Notification->By Event->System Events and look on the list for this event.
Hope this helps.
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2021-07-01 04:11 AM . Last Modified: 2024-03-05 10:23 PM
It looks like SNMP probing is key to Jetadmin's device discovery process:
HP Web Jetadmin Software - Device Discovery FAQ - c01718860 - HP Business Support Center
so disabling the alert seems to be the way to go.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.