DCE - Change from SNMPv1 to v3 in Expert

[DCIM_Support]

Hi,

I got a nice task from our IT security to replace all SNMP communication from version 1 to version 3 on all monitored devices in StruxureWare Expert.

I have more than 600 monitored devices (mostly APC ATS/PDU/UPS) therefore I would not like to do it one by one on each equipment.

I guess "APC SNMP Device Configuration ..." will be my friend to setup on device side. But how I can modify the global SNMP scan settings to avoid outage or seemless transition in the monitoring?

Is there anyone who did the same in the past on multiple device? I just need a high level plan how to do it in a nice way.

Thanks.

(CID:126181235)

[DCIM_Support]

Hi Mate,

I suggest checking out k-base FA158442. It goes through the suggested sequences and should halp out a lot.

Steve

(CID:126181244)

[DCIM_Support]

Hi Steven,

I went thru your suggested k-base FA158442. How it is possible to do it in batch?

I created a Template in "APC SNMP Device Configuration" where I provided the SNMPv3 settings and disabled version 1.

I tried to apply to a few device but I got connectivity failure. I checked the SNMP device settings and those are still showing SNMPv1 protocol so ddi not change to v3.

(CID:128067449)

[DCIM_Support]

Hi Mate,

If there's an issue with the file transfer, you'll want to go to the following menu:

Device–>SNMP Device Configuration settings–>Device File Transfer Settings...

Make sure the port, protocol, and user/password combinations match that of the NMCs that you're trying to configure. If not, or if they are blocked over the network, you'll not be able to push the configurations over to the devices.

Steve

(CID:128067656)

[DCIM_Support]

Hi Steve,

The configuration has been successfully pushed to device because I manually checked and logged in via web. But the switchover from version 1 to 3 in DCE is not working. DCE is still want to use v1 but of course it is not working because is disabled on the device.

(CID:128067897)

[DCIM_Support]

Hi Mate,

The only way DCE changes that is when the configuration is pushed in the way it was done in that document. As you've likely seen, you can't edit the version of SNMP used in the communications settings  fields of DCE. 

The only 2 things I can suggest are to:

1: Try chqanging everything back then make sure you follow the document step by step, or

2: Delete the devices and re-add them using SNMP version 3.

Thanks,

Steve

(CID:128067906)

[DCIM_Support]

Thank you, I successfully changed from v1 to v3 on most of the APC devices.

What about non APC devices (such as Emerson/Eaton UPS)? How I can change those without losing historical data?

(CID:128748065)

[DCIM_Support]

Hi Mate,

Since we can't configure them through DCE, DCE doesn't know that the communications protocol has changed and as you've seen, you can not manually change that. You'll need to delete and re-add the device.

Steve

(CID:128748083)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.