01-04-2006 08:50 AM
Is there any easy way to batch modify all the SNMP community strings in IPM 2.5.1?
Solved! Go to Solution.
01-04-2006 09:03 AM
If you are on Solaris, try the following:
- create a text file, let's call it comm.dat in /opt
- the file should contain the list of devices and new community strings in this format:
u 10.10.10.10 public yjdabear
u 10.10.10.12 public yjdabear
where u = update
2nd col = device name (as it shows up in IPM)
3rd col = new read community name
4th col = new read write community name
- issue the command:
/opt/CSCOipm/bin/ipm loadsrc /opt/comm.dat
(might get a VisiBroker error message here, it can be ignored)
01-04-2006 09:03 AM
If you are on Solaris, try the following:
- create a text file, let's call it comm.dat in /opt
- the file should contain the list of devices and new community strings in this format:
u 10.10.10.10 public yjdabear
u 10.10.10.12 public yjdabear
where u = update
2nd col = device name (as it shows up in IPM)
3rd col = new read community name
4th col = new read write community name
- issue the command:
/opt/CSCOipm/bin/ipm loadsrc /opt/comm.dat
(might get a VisiBroker error message here, it can be ignored)
01-04-2006 09:13 AM
Thanks. I assume this is safe, that it only updates the Source, without touching anything else such as Target/Operations/etc.? Can I let "ipm export" save me the trouble of starting from scratch with comm.dat? Where is "ipm exporting" writing to?
01-04-2006 09:15 AM
Yes, you may use the export to create the comm.dat
I haven't done this in a while, so you might want to test it with a couple devices at first.
01-04-2006 09:24 AM
I ran "ipm export -q -s" (no column heading, Source only). The prompt came back right away. I don't know where to look for the exported data, if any.
01-04-2006 09:31 AM
When I ran it, the output was displayed on the screen.
I was also able to output it to a file by issuing the command:
/opt/CSCOipm/bin/ipm export -q -s > /tmp/ipm-export
01-04-2006 09:40 AM
Heh, it's weird here. Here're my results:
ipm export -q -s ==> nada
ipm export -q ==> nothing
ipm export -q > /tmp/ipm.txt ==> /tmp/ipm.txt is empty
ipm export -s ==> Source with column heading
ipm export -s -q ==> Source without column heading
ipm export -q -s ==> Source without column heading
01-04-2006 09:43 AM
Weird indeed. Good thing you have them now.
01-04-2006 11:01 AM
I'm so far unable to update the SNMP commm strings successfully.
Enter password:
Please check the /tmp/ipm2.txt.out file and message log for status.
=================================================
Loading of sources into database complete.
Press return key to continue.
=================================================
u,ab2621saa1|ab2621saa1,read,write - OK
u,cd2621saa1|cd2621saa1,read,write - OK
u,172.18.23.3|cd2621saa2 e1-1,read,write - OK
172.18.23.3 is the "Hostname or IP address" shown in the GUI (Edit -> configuration). "cd2621saa2 e1-1" is the Alias Name. But none of the threes "OK"s are updated. I even closed and re-opened the GUI Windows IPM client.
Here's the output of "ipm export -s"
AliasName,HostName,IPAddress,ReadCommunity,WriteCommunity,IOSVersion,SAAVersion,
MaxData,LastTimeSet,MaxColl,UpTime
ab2621saa1,ab2621saa1,10.54.31.53,read,write,12.2(6a),2.2.0 Round Trip Time
MIB,16384,1060705775,500,187132788
cd2621saa1,cd2621saa1,10.54.30.53,read,write,12.2(6a),2.2.0 Round Trip Ti
me MIB,16384,1060705633,500,196106411
cd2621saa2 e1-1,172.18.23.3,172.18.23.3,read,write,12.2(13b),2.2.0 Round Trip
Time MIB,16384,1085113138,496,1035471140
etc/source/srfile.
###############################################################################
#
# This file has example definitions for source routers.
#
# Comments starts with the "#" character
#
# The format of the file is as follows:
#
#
#
#
#
#
# seperated with a '|' ("vertical bar")
#
# The valid commands are 'a|A' for add; 'd|D' for delete; 'u|U' for update;
#
# WARNING: Please assure the permissions on these files
# do not allow read access to all users due to
# the inclusions of SNMP community names.
#
# NOTE: In case hostname and aliasname are different
# it is mandatory to provide both. In that case
# aliasname is not an optional paramater.
###############################################################################
#a router1 public private
#a router2|routerInLab santa claus
#a router3.foobar.com open secret
01-04-2006 11:16 AM
The reason it fails for the last one is that the AliasName is not the same as the HostName
Does the AliasName have a space in it?
If not, then your last line would be:
u,172.18.23.3|cd2621saa2e1-1,read,write
If it does have a space in it, that will cause problems as space is a delimiter.
As far as to why the changes did not take effect, I wouldn't know. Sorry.
01-04-2006 11:48 AM
I edited my previous post, because I made all three "OK" after I saw this paragraph in etc/source/srcfile:
# NOTE: In case hostname and aliasname are different
# it is mandatory to provide both. In that case
# aliasname is not an optional paramater.
My only speculation right now on why it's not updating is maybe that's by design when there're IPM clients running. I know for sure there's someone else running IPM other than me at the moment.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide