SSH Credential Requirements for Network Gear

[Stacey Perri]

Hello, 

For Unix machines, I see that root permissions are a requirement for privileged commands during the Discovery process.  

However, our company has some red tape around root privilege for SSH authentication company-wide.  I am curious and have looked, but not found -- could SSH creds work read-only for network gear communication via Discovery?  

Any insight the community can provide is appreciated.  Thank you! 

[doug_schulze]

Technically we don't need root of Unix/Linux, but for best data quality you would want to utilize SUDO to run specific commands.  As for Network devices, those are discovered with SNMP and all that requires is read-only.

[Stacey Perri]

Thank you! I should have clarified that we do already discover via SNMP for network gear. We were discussing SSH as an option for firewalls and some network gear that occasionally might not have SNMP configured upon deployment. 

I appreciate the response! 

[doug_schulze]

You "could" but you would have to write a new pattern that replicates the OOB , that does ssh commands over snmp.. a quite daunting task.

[Harish Bainsla]

Hi @Stacey Perri  For network discovery you have to use SNMP credentials . Check below link to understand better

https://youtu.be/XTqdvSd9z6o?si=vM_6dvD-TTIWmoTa

https://noderegister.service-now.com/kb?id=kb_article_view&sysparm_article=KB0752582

if my answer help mark helpful and accept solution