Discovery - Can you over-ride the SNMP version?

[Paul Santaniell]

Please see discovery status for DIS0031657. The device is responding indicating that SNMP v3 is open. However, the device owner would like us to use SNMP v2 to access the device?

I believe that Servicenow is not trying v2 due to the response of the device. Can this be over-ridden so that Servicenow tries v2 despite port scan showing v3 is open.?

[DaveHertel]

Hi - if your discovery is setup with schedules, check the config of the schedule.  (You may have to customize the form to show the field for the SNMP version.)  in your case, you may want "all" so the schedule will try both versions of SNMP creds.   SNMP v3 is definitely more secure but if the device owner only supports v1/v2 then your schedule will need to either use v1/v2, or "All" which means try both versions.

Another option is to have 2 different schedules (but more painful), 1 using SNMP v1/2 and the other using v3... and each schedule only targets the IPs appropriate for the SNMP version (fragile to maintain long-term and not recommended...)

FYI without access to your instance, no one can view DIS0031657

Hope this helps some?

[Rahul Priyadars]

+1...

[Jam2]

@Paul Santaniell @DaveHertel I know this is an old thread, but has anyone found a way to enable only SNMPv2 and disable all other options?

[DaveHertel]

Hi -- Sorry, no I've never heard of (nor needed to...) enable only SNMP v2.   I can't imagine a need to do that, since v1/v2 is used/tried and if succeeds, should be all that is needed for discovery to do its job as designed.

Dave