psilva
 
Posts:81
 |
| 05/08/2006 7:11 AM |
|
I Need to remove public community string from monitorization infraestructure.
What configuration changes do I need to do in the CORe, DSM and clients ?
Need help urgently
Pedro
Edit/Delete Message |
|
|
|
chris.poole
Posts:54
|
| 05/08/2006 9:04 AM |
|
First, I would suggest not deleting Public from your DSM's as it is the default for most devices and is read only. Instead add new community strings for your environment.
Start by logging in to one of your DSM's and typing "pollsets" at a command prompt. This will bring up the Poll Sets GUI. You can change the community string here for each device type, or better yet, create a new entry for each device type with the new community string.
You should find an entry for "Server", create a new entry called "Server2" and copy all settings from "Server", but put in your new community string. Do this for every device type you have. Then you must resetdsm all DSM's...
Now every server must have its internal SNMP setting changed to the new string before you delete the "server" entry. This needs to be done to every device in your environment before the pollset containing public can be removed... That's why I say leave it there. (It's just for polling and does not allow local SNMP to respond to a get request with that string on any of you DSM servers.) |
|
|
|
psilva
Posts:81
|
| 05/08/2006 10:43 AM |
|
| But in this case woulodn't the objects be using the old pollset ? Must I change all snmpt get_auth_name and set_auth_name ILPs on every class and object ? |
|
|
|
chris.poole
Posts:54
|
| 05/08/2006 11:36 AM |
|
I am afraid so... But think how good that feeling of accomplishment will be when you are done  |
|
|
|
chris.poole
Posts:54
|
| 05/10/2006 1:13 PM |
|
| Any luck? |
|
|
|
psilva
Posts:81
|
| 05/11/2006 4:12 AM |
|
I'm still testing but it is not looking good . I've already Applyed a script to change managed objects get_auth_name and set_auth_name ILPs value
The servers agents discovered with new public community are not appearing in the CORe and im geting traps in EM console like community from rejected by cailogaA2 and for hpaAgent.
Should not be enough to use -c "community_name" parameter in dscvrbe command ?
In class browser these two agent classes have already the new community string names. Also in object browser the new community string name is set. Probably need to check the pollset settings again and do a resetdsm skipwv?
|
|
|
|
psilva
Posts:81
|
| 05/23/2006 10:18 AM |
|
Hello,
which DSM policies that have public hardcoded must I change ?
I mean which files and strings within ?
Regards
Pedro
Edit/Delete Message |
|
|
|