Unsolved
This post is more than 5 years old
25 Posts
0
17669
February 7th, 2012 08:00
OME discovery - multiple windows creds, same ranges
We have multiple untrusting Windows domains that have some overlapping IP space. I'd like to make one big discovery range for the whole IP space, but then I can't set mutliple credentials to try. I made the range with one IP range and one set of creds, and then tried adding a new range with the same IP range (with the intent of setting up different domain creds) - it didn't allow me to do that.
How can I do what I want to do, easily? I'm sure that the same problem would apply if we had multiple SNMP communities, or WS_MAN creds, within a given IP range.
0 events found
No Events found!


DELL-Jeff M
2 Intern
•
793 Posts
0
February 7th, 2012 15:00
If you were just discovering servers in multiple SNMP communities, you would set the SNMP service to accept packets from any host on each of the communities in the SNMP service's properties, then create separate ranges in OME, one for each community string.
Give that a shot and see how it goes with your multi-domain setup. You should put the OME box in the same domain as an email server to make alerting go more easily. The alternative if that doesn't work is to set up one OME box in each domain.
mfinnigan
25 Posts
0
February 8th, 2012 06:00
Jeff, I'm afraid you're missing my point.
DELL-Jeff M
2 Intern
•
793 Posts
0
February 9th, 2012 15:00
Please explain it again, with more detail if you think there is something specific I'm missing. I got the feeling that the thing you want to do is not something OME (or ITA or DMC) is exactly capable of, so I gave you a couple things they *can* do that are close to what you want.
mfinnigan
25 Posts
0
February 10th, 2012 08:00
Also, your suggestion : " you would set the SNMP service to accept packets from any host on each of the communities in the SNMP service's properties, then create separate ranges in OME, one for each community string." isn't possible. Because I can't do multiple discovery ranges with identical IP spaces, even if they had different SNMP strings.
mfinnigan
25 Posts
0
February 10th, 2012 08:00
Jeff - "We have multiple untrusting Windows domains that have some overlapping IP space." I can't make a single IP range with multiple windows creds, and I can't make multiple ranges with identical IP spaces but different windows creds. How do I solve this problem, other than importing each known host in each domain? "Discovery" should make things easy, not require me to define all the hosts I already know about.
DELL-Jeff M
2 Intern
•
793 Posts
0
February 10th, 2012 15:00
You don't have to discover entire subnets, you can just do small portions of your IP space. Do you have different domains intermixed like 192.168.1.10 is Domain A and ...11 is B and ...12 is A, or are they clustered? If for instance 192.168.1.10-20 is Domain A, then you can just make one discovery range that covers just those IP addresses, then do other ranges for the other domains.
One thing that I think we're not communicating on is the different domains and Windows credentials. There is no part of the OME SNMP discovery range setup that needs Windows credentials. If you are putting in a username/password then I think you might be looking at a different protocol like CIM.
What happens when you set up all domains with the same community string and one discovery range in OME?
mfinnigan
25 Posts
0
February 13th, 2012 05:00
Jeff - the IP spaces for the domains are quite intermixed. To the point that I would be doing discovery by single IP addresses, which makes for a very high-overhead discovery process which I'm trying to avoid.
For the second point - you are misunderstanding either me, or the process. My entire point is about Windows domain settings in discovery - this is set is under WMI Configuration. My sentence at the end about SNMP and WS-MAN was simply an additional point - "I'm sure that the same problem would apply if we had multiple SNMP communities, or WS_MAN creds, within a given IP range." For Windows servers, to get the whole inventory, I have to provide valid WMI creds. If I just give SNMP, it can't do a full inventory, right?
DELL-Jeff M
2 Intern
•
793 Posts
0
February 13th, 2012 15:00
Actually, about the WMI vs. SNMP, it is the other way around. You only need to use SNMP to get a full inventory, WMI is not needed at all if you have OMSA installed on the servers. Try one discovery range with just SNMP and see how that goes.
mfinnigan
25 Posts
0
February 14th, 2012 07:00
OK, I must have mis-read or misunderstood something. I see that there's a table in the OME Users Guide that says what you're saying. Thanks!