Automate the automation: set SNMP version with network scan

General
1

Hi,

I am facing the problem that the customer has a mixed environment with lots of v2c and v3 SNMP devices.

Getting the hosts into checkmk with “Network scan” is the easy part - how can I automatically e.g. set a host tag for the SNMP version (which then would assign the proper SNMP version and community/credentials)?
Is there any way to achieve that?

It’s one of the customer’s requirements not to have to set a version/version tag explicitly.
Thanks & regards,
Simon

2

Hallo,
does the inventory deliver the snmp-version direct or indirect?
Ralf

3

I think that is not so easy. If your device has no SNMP config you cannot fetch any data to determine a device type or anything like that.
Without something like an nmap scan to find a device type it is complicated to assign anything.
What could be possible is that your IP scan also got all the shiny well maintained DNS names :slight_smile:
Then you have a predefined rule assigning SNMP settings based on a regex inside the hostname field.

2 Likes
4

Hi Ralf,
what do you mean by “direct”/“indirect”?
Regards,
Simon

5

I think that is not so easy. If your device has no SNMP config you cannot fetch any data to determine a device type or anything like that.

Thanks Andreas, I was afraid of that… :neutral_face:
cu,
Simon

6

But my last option should work :slight_smile:

7

Hallo,
ma idea is to look which software-packages are installed.
Perhaps there is a typical package that gives you a hint about the snmp Version. If package xyz is installed than V3 is used or if packages younger than date V3 was configured. Very thin ice but maybe a first step.
Is it possible to run a dumb script once to find it out the version using try and error?
Ralf

8

I also have that problem. Historically I have a mix of v2 and v3 with a few different credentials.
The DNS-Name provides the device-type but there are still possibilities for version and credentials.

I have a daily script that automates the creation of devices in Checkmk (CMDB → Checkmk) and at that
step the credentials are also set in Checkmk. So at that step I could try to SNMPget something from the device (after 3-4 tries I should have the correct version/credentials combination) and then set it up accordingly in Checkmk.

Sounds like simple if-statement in a bash script but I didn’t have time to do it so far… :roll_eyes:

9

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact @fayepal if you think this should be re-opened.