in MSP • 10 months ago
We use MSP plus (version 9011) to monitor a few different locations on different subnet's and AD's, behind different ISP's.
I've rolled out agents to all servers in the diffrent locations.
They all show up in the MSP plus dashboard.
On each network we have installed one collector to collect snmp data.
We want to monitor critical events for soms SAN's (HP MSA2000 serie) at other locations by snmp.
For eample, we have a SAN called "SAN1" and a collector in the same network on a server called "server1"
I've set the community string in the msp plus server and I have set this community string in SAN1
I've instructed SAN1 to send the notifications to Server1
On server1 I've configured the windows SNMP service with the correct community string and I've instructed
the service to send the snmp traps to itself (127.0.0.1) , is this correct? or shoul i disable the snmp service on the server where the collector is located?
From what I understood the windows snmp service sends the data to the collector on Server1.
The collector should send the info to the MSP server (located in another network)
I've addes SAN1 1 to the MSP plus database a a network device with the correct community string.
I cannot see any incoming traps in the dashboard, I can't seven see the unsolicited traps.
It looks like there is NO communication with the external network at all....
Also the SAN1 doesn't get addes to the msp plus server, the server just don't receive a reply from the device.
So The next thing I tried was adding a pc on the local network to the msp plus database as a network device.
I configured it to use the correct community string and I've selected the correct collector.
surprisely the device is now added to the database and I can read all kind of information by snmp.
So I know that the msp plus server is able to receive snmp data.
so I have three questions:
1. how does the communication work exactly? From what I understand the snmp device sends its traps to the collector service by snmp (from port 161 to port 162) and the
collector service sends this info to the msp plus server by https (443)
2. Why can't I see the incoming snmp traps in the msp plus server as unsolicited traps?
3. are there apart from port 443 and 8330 any other ports I should open on the incoming internet ip adres for the msp plus srver?
for example, should I configure windows to use a fixed WMI port and open in it on the incoming ip adres? do I also have to open port 162?
Or does all communication with the agents gro throught port 443 ?
- 3 Replies
- 702 Views
- 0 Followers