There is no way to recover the user's password or the original authentication or privacy values of the SNMP credentials. Forcing a password change/reset might resolve the user's password, but it won't resolve the authentication or privacy values in the SNMP V3 credentials for the user.
Original Message:
Sent: Wed July 26, 2023 08:02 AM
From: Sunil Chaurasia
Subject: UDP Connectivity
Thanks for the detailed info Joseph.
Is there any way we can extract the password of the existing SNMP users created or we are only left with password reset/force password change?
------------------------------
Sunil Chaurasia
Original Message:
Sent: Tue July 25, 2023 07:48 PM
From: Joseph Morgan
Subject: UDP Connectivity
The SNMP credentials are indeed used for allowing a client to connect to DataPower. Then Engine ID is used by the client, and you can either explicitly set it, or leave it at 0, which will take on the DataPower engine ID. You can find DataPower's Engine ID by viewing the SNMP status.
Yes, you have to share the details with the client in order for it to be able to connect using that user.
I'm not sure what you mean by "other info required". The SNMP user settings allow you to set up different values based upon supporting more than one SNMP client. That is, if you have a client that can only communicate via MD5 and DES, compared to others that may support SHA and AES, you can do that.
------------------------------
Joseph Morgan
Original Message:
Sent: Tue July 25, 2023 10:19 AM
From: Sunil Chaurasia
Subject: UDP Connectivity
Hi Joseph,
When we create the SNMP user accounts, the Engine ID is basically the identity of the SNMP Client (one who is contacting DP over 161), right?
And this details should be shared by the Client in order to configure this object, right.
Also, what are the other info required from the SNMP Client in order to setup this SNMP User Account at Datapower?
------------------------------
Sunil Chaurasia
Original Message:
Sent: Thu July 13, 2023 09:53 AM
From: Joseph Morgan
Subject: UDP Connectivity
You can check on open ports on the DataPower GUI by searching for "TCP Port Status" from within the control panel's left side menu and then selecting that option. This will list all local and remote IP's and port from and to which DataPower has a connection. However, this information is fleeting at best, and may not show all open ports.
For SNMP, you go to the default domain and, from the control panel, search for "SNMP" and select "SNMP Settings". Here, you can configure SNMP for external "users" (typically tools), and access the Enterprise MIBs to the external tools can import them.
------------------------------
Joseph Morgan
Original Message:
Sent: Thu July 13, 2023 04:34 AM
From: Sunil Chaurasia
Subject: UDP Connectivity
How can we check for the open UDP ports on Datapower GUI?
And Can you also help with the steps/configuration to open a UDP port 161 on Datapower appliance as you mentioned in default domain!
------------------------------
Sunil Chaurasia
Original Message:
Sent: Wed July 12, 2023 10:09 AM
From: Joseph Morgan
Subject: UDP Connectivity
Nothing is open in DataPower out of the box. You have to explicitly open it.
It sounds like, to me, they want you to open up the SNMP for the appliances for monitoring.
That's something you set up in the default domain.
------------------------------
Joseph Morgan
Original Message:
Sent: Wed July 12, 2023 04:04 AM
From: Sunil Chaurasia
Subject: UDP Connectivity
Hi Community,
There is requirement of Client to connect to Datapower over port 161 on UDP Network Protocol.
Wanted to know:
1) If the port 161 (UDP) is auto enabled on Datapower or we have to explicitly do this.
If we need to configure, can you please help with config.
And If 161 is auto-enabled, do we need to whitelist the client; so that they can communicate with DataPower.
2) How can we check if the UDP port 161 is open on not from Datapower (GUI).
------------------------------
Thanks
------------------------------