NCM SNMPv3 compliance

Hello,

is it possible to run compliance job that checks whether SNMPv3 user is configured on the device? There's no such information in running or startup configuration and, as far as I know, NCM relies on running/startup config. Here is what I would like to achieve:

SWITCH#show snmp user

User name: xxxxxxxxxxxxxxxxxxxxx
Engine ID: xxxxxxxxxxxxxxxxxxxxxxx
storage-type: nonvolatile active access-list: xxxxx
Authentication Protocol: SHA
Privacy Protocol: AES256
Group-name: readonly

I would like SolarWinds to logon to each device and check whether SNMPv3 user is configured and appropriate authentication and privace protocol is configured. Is that possible?

Thank you in advance!

Find more posts tagged with

snmp_v3

ncm compliance reports

ncm

Accepted answers

All comments

stuartd

Hi Michal - you should be able to do this.

The issue I have with NCM Compliance is that you can't get it to send results to a mailbox or run a report. Secondly, it only gives you a broad yes/no type approach rather than saying SW1 is OK but SW2 isn't.

In this case, it is way less elegant, but I would run an NCM job. These are also relatively straightforward to setup but you just need to identify the right command(s) you wish to run. They are less elegant as the output is plain text but you can parse that in a spreadsheet or similar, and you can have the results emailed.

Michal83

Hello,

thanks, sounds like a plan but if I run NCM job that logs on to every device according to set criteria, shall I get the output for couple hundred devices in one file? Or will it be sent via email?

stuartd

Yes. It will either be one file or one eMail [or both] with all the switches listed one after the other.

As I say, I tend import the text file into Excel and use that to parse the data initially. I did have a colleague that wrote a clever script to parse text output to what he needed.

mesverrum

You can do all kinds of show commands by adding config types
https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-enabling-a-new-config-type.htm

Once you create the config type you'd need to edit the device templates so it knows what commands you want to run when you ask it to get the "snmp user" config type, but i have done dozens of versions of these over the years so its a pretty common/useful thing to know if you are using NCM.

https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-example-cli-device-command-templates.htm

stuartd

Interesting. I've never considered this approach before so will have to find some time to read up and see what's what.

OOI, what does the output look like when run this way?

mesverrum

just looks like whatever text that you would get back from the CLI if you ran the command yourself.

adam.beedell

Should be able to get some stuff out via NPM alerting. I've been starting work in this space recently for NCM and SCM. Anything that'd be helpful to share if I end up working on it?