This post is more than 5 years old
1 Rookie
•
5 Posts
0
3654
July 18th, 2019 08:00
SNMP v3 Traps to Support Assist Enterprise
Hi there.
We have a security requirement to change all SNMP Traps on our iDRACs from v1/2 to v3. I've been doing a piece of work configuring our new Support Assist Enterprise installation, part of which is ensuring the "automatic case raising" function that SAE supports works as intended. So far I've noticed the following behaviour:
SAE reports full monitoring capability on discovered devices (manually added) only when the SNMP Trap Format is set to 1 or 2 on the target iDRAC. This extends to the automatic case generation. As soon as I switch the Trap Format on the iDRAC to 3 to comply with our network security requirements, however, SAE reports the following:
The IP Address of the server where SAE is installed is already listed as an IP destination. SNMPTrap.exe is bound to port 162 on the Windows Server where SAE is installed and there's no indication the traffic is being blocked.
Considering SNMPv3's improved authentication mechanisms and encryption, does SAE support receiving SNMP Traps of this format? I can't see anywhere in the SAE console to configure SNMP credentials as you would in other monitoring platforms such as DELL Open Manage or SolarWinds - though I'm happy to be shown I'm wrong!
The SAE installation is hosted on a Windows 2012 R2 server and is version 2.0.21.93.
The iDRAC I'm using to test is a version 8 iDRAC at Version 2.61.60.60 (Build 08).
Thanks.