Does anyone know if there is a way to discover which Cisco devices in Orion are SSH and SNMPv3 capable? I need to provide a report to management showing what devices are/are not so as to plan for the devices replacement. thanks
If a device doesn't have snmpv3 configured then Solarwinds would have no way to know if you do or don't have the option to enable it. You most likely could use Solarwinds to build a report of the distinct models and code versions on your hardware but you would have to cross reference that against your vendor's feature lists to find out which ones do and don't support it.
If you already have snmpv3 running on all the devices that support it you could make a list of all the devices that use your snmpv3 credential, this custom swql query should work as a starting point for you
It lists off every node and the current cred being used to monitor it.
SELECT n.Caption AS [Node Name] ,n.detailsurl as [_linkfor_Node Name], '/Orion/images/StatusIcons/Small-' + n.StatusIcon AS [_IconFor_Node Name],n.ip_address as [IP Address],n.detailsurl as [_linkfor_IP Address],c.Name AS [WMI/SNMPv3 Credential Name], n.Community as [SNMPv2 Community],'Edit' AS [Edit], '/Orion/Nodes/NodeProperties.aspx?Nodes=' + ToString(n.NodeID) AS [_LinkFor_Edit],'/Orion/images/nodemgmt_art/icons/icon_edit.gif' as [_IconFor_Edit]
FROM Orion.Nodes n
left JOIN Orion.NodeSettings ns ON n.NodeID = ns.NodeID and ns.SettingName like '%Credential%'
LEFT JOIN Orion.Credential c ON ns.SettingValue = c.ID
where n.ObjectSubType!= 'ICMP'
alexanderf1954,
It's been a while since I had to gather that info myself. I believe You could just run a report in Orion looking for OS images with one of these ("k9", "k2" and "k8") in the image name. I would assume that SNMPv3 would be available in these as well since they require encryption functionality also.
Best Regards,
Derik Pfeffer
Loop1 Systems: SolarWinds Training and Professional Services
LinkedIN: Loop1 Systems
Facebook: Loop1 Systems
Twitter: @Loop1Systems
I know this isn't a SolarWinds answer, but if the devices are unknown to Orion, could I recommend the nmap application? Nmap: the Network Mapper - Free Security Scanner
It is capable of port scanning your devices, amongst other things, and should be able to provide the information you're after and without needing to know credentials
To find open SSH ports try:
nmap -p22 <IP address or range> --open
To find SNMP, is a little harder to do as it is UDP as it doesn't acknowledge, but most of the time this will do (check for open/filtered responses):
nmap -sU -p161 <IP address or range>
The '--script snmp-brute' option can also very useful - snmp-brute NSE Script
I hope it helps.
