RSA AM 8.1

[nuzzy]

Hello,

We recently upgrade to RSA Authentication Manager 8.1 from 7.1. The RSA template I found here doesn't seem to work anymore. I was wondering if anyone has had success graphing 8.1?

[lukascesium]

Still works but you need to recheck snmpd.conf on your RSA host . It's seem RSA snmpd autoconfig return wrong proxy config hence no data return.

[victimist]

I get CPU Stats, Memory Stats, Network Stats

But AM Stats, Token Assignments, Authentications are all blank.

Are the missing pieces what needs enabling in the snmpd.conf ? Any chance you someone can confirm what needs to be in there ?

Thanks

[BSOD2600]

Not sure what 7.1 use to do, but 8.1 requires snmpv3. Certain that config is the same? Validate you can still snmpwalk the OIDs referenced in the script?

[victimist]

Yup SNMP V3 is what its set to use. I jumped onto the RSA via Console Session and a NETSTAT shows the RSA is listening on 8002 as expected ... But it only seems to be allowing connections from 127.0.0.1

Have found the snmpd.conf and see this line:
proxy -v 3 -u hp -l authNoPriv -a MD5 -A Access123! 127.0.0.1:8002 .1.3.6.1.4.1.2197

So I changed the 127.0.0.1 to 0.0.0.0 and restarted the snmp service, but I still couldnt connect.

Can anyone confirm whether im doing the right thing? Also do I need to reboot the RSA following the change to the snmpd.conf ?

Thanks


Update : Edited the above line and replaced 127.0.0.1 with 0.0.0.0. Saved the config and restarted SNMP - No Luck. Rebooted RSA appliance and the 0.0.0.0 edit I had made changed back to 127.0.0.1

[victimist]

Still works but you need to recheck snmpd.conf on your RSA host . It's seem RSA snmpd autoconfig return wrong proxy config hence no data return.

Any pointers one what needs doing please?

[BSOD2600]

I also ran into a but with 8.1 SP1 patch something (still not fixed as of SP1 P9) that if you use a SNMPv3 password which contains a few un-escaped special characters (I think it was % or &), that it'll mess up the snmpd.conf and invalidate it. Additionally, each time you save the SNMP page in the AM, it continues to write more bad data into snmpd.conf. nice bug to troubleshoot when they dont want the customer poking around via SSH.

Assuming you have the SNMP settings between AM's and the replica(s), you should be able to snmpwalk one AM from another AM (and assuming firewall rules allow it).

[victimist]

Have tried changing the password, to no avail. Still don't get any AM graphs.

If you have AM graphs working on 8.1 ... please please tell me how ?

[BSOD2600]

In progress getting working with SCOM...