snmp vunerability

[DCIM_Support]

Our Network Security team is asking that all SNMP community strings be changed form the defaults (public/private) to something else.

DCE uses SNMP to communicate its health to DCO.

How can we change the community strings for SNMP on DCE?

Thanks

Craig

(CID:104174443)

[DCIM_Support · Accepted solution]

Craig,

You can change StruxureWare Data Center Expert's community strings from within the Data Center Expert Client under: System > Server Administration Settings > Server Access > SNMP Server.

Best Regards,

Cory

(CID:104174446)

[DCIM_Support]

Thanks Cory, that's perfect. Can you now point me in how to do that in Operations? regards Craig

(CID:104174452)

[DCIM_Support]

DCE should be communicating to DCO using external system configuration, which would use web services from DCE, not SNMP community strings. Did you discover the DCE server within itself and then used that to associate within DCO?

(CID:104174454)

[DCIM_Support]

Yes, so it was all communicating between DCO and DCE until I changed the DCE SNMP settings. Then I am getting the alert, in DCO, that it cant communicate with DCE anymore. I have looked at the external settings and DCE is still there and passing the test button.

(CID:104174455)

[DCIM_Support]

If you would like to change the SNMP community strings that DCO uses for its agent, for systems that are polling it, it would be within: Webmin > StruxureWare DC Operation > Setup.

(CID:104174456)

[DCIM_Support]

Can you provide a screen capture of the alert message that you are receiving? Is there an active alert within StruxureWare DCE as well? If you search all devices within DCE, can you find the IP address of your DCE server? Does it have a red X on the icon?

(CID:104174459)

[DCIM_Support]

Hi Cory, Turns out that my predecessor had setup the DCE as a device in DCE (it polled itself) using SNMP. So having changed the SNMP string in the DCE Server, I also needed to go into the Device Setting and update there. What DCO was showing was the alert from DCE that it could not poll itself.... circular reference. All sorted now, thanks 🙂

(CID:104174460)

[DCIM_Support]

You're welcome! Glad to hear you were able to resolve it!

(CID:104174467)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.