Unsolved
This post is more than 5 years old
2 Posts
0
26940
March 5th, 2010 08:00
iDRAC private snmp enabled: how to disable ?
During a security audit I've found that even if I've changed the SNMP Community Name from the web console,
the SNMP agent still answer using the "private" community.
Here is a sample:
# snmpwalk -c public -v 1 192.168.2.101 system.sysName
no answer <- CORRECT
# snmpwalk -c ***** -v 1 192.168.2.101 system.sysName
SNMPv2-MIB::sysName.0 = STRING: RAC_5L***4J <- CORRECT
# snmpwalk -c private -v 1 192.168.2.101 system.sysName
SNMPv2-MIB::sysName.0 = STRING: RAC_5L***4J <- WRONG
Is this behaviour correct or did we miss something in the config ?
Many thanks.
Federico
0 events found
No Events found!
reybeast1
347 Posts
0
March 5th, 2010 12:00
Sorry, that is the nature of the beast on that one. I went round and round with Dell DRAC folks on that one. Can't be changed.
fvecchiatti
2 Posts
0
March 5th, 2010 23:00
Thanks for the information.
From a first test it seems the private has no write permission, but I'm not sure.
In any case this is for me a big security problem.
Bye