I have a APC rackmount pdu that is generating emails with SNMP errors everytime that it is scanned.
The message is similar to the following:

“Informational – System: Detected an unauthorized user attempting to access the SNMP interface”

It would be great, if we could specify an ip address to use a specific snmp read string for, or if the crawler would remember which community string it last used for a device, that worked for that device. I currently have several different read strings configured for different device types at my company.

Regards,

Rob

Hi Rob,

The Crawler is supposed to remember successful authentication results and use those for future scans. It seems like this might not be working for you however. We will look into it.

Also, your idea of having the ability to specify and IP address to use for a given SNMP community string is a good one. Thank you.

I get the same thing.
Informational – System: Detected an unauthorized user attempting to access the SNMP interface from ###.###.###.###.

I set the community name and the IP address for the Crawler in the Access Control for the APC and it still didn’t work. From the Crawler I did the test and it works.

This would be a great help if we know what to do to make it work.

Thanks much Paglo for your help.

I suspect that the error messages you are seeing is not because the Crawler doesn’t have the correct community string for the APC device, but rather because it is also probing the device with the wrong community string too. The Crawler will try each community string in turn until it finds one which works.

Are these error messages a problem for you? I have wondered about making credentials be entered per-device, but that would have the drawback of being yet another configuration item that is necessary. I am interested in other people’s feedback on this.

Hi Chris,
is there an possibility to define on the crawler to set an fixed comunity string for all devices?
i disattivated the alert on my apcs, bud so i dont get an alert if someone other try to access via snmp to the APC devices.
It would be great if you implement this possibilty.
Regards,
Thomas

Hi Thomas,

You can limit the credential by device. This could potentially be used to specify a specific SNMP community string specifically for your APC device and use another string for all your other devices. Does that answer your question?

Hi Bryan,
thank for your response, but this is not the question what i made.
The problem is if i setup for all devices the same read community String and setup this on the crawler, why does the crawler then also try with all known delfault public strings? Then i receive always authentification errors from all devices. For each device are that than about 100 Error Mails per day, on 50 SNMP Devices that are than 5000 Emails whit authentification errors.
Do you know ho to configure the crawler that is using only the string what i setup and not trying the other default strings?
Regards,
Thomas

Hi Thomas,

One of the improvements from the release last Friday was that you can now configure Credentials (which the Crawler uses to gather network information) to apply to a subset of devices rather than all the devices on your account.

To do so, you should select the “Only use the credential for the devices, groups or networks selected below” option in the Limit Credential Use section of the Configure a Credential window.

Read more about it in the Release Notes

I hope that helps.

Best regards,
Bryan

Bryan Barrett
Product Specialist – IT Services
Citrix Online

Hi Bryan,
whatewer i write in the community string, the crawler uses more strings what i don’t definied.
for example from an apc:

26.09.2011 13:55:55 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:55 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:55 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:55 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:55 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:55 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:55 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:54 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:54 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:54 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:54 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:54 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:54 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:53 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:52 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:52 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:52 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:51 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:50 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:49 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:49 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:49 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20. 26.09.2011 13:55:49 System: Detected an unauthorized user attempting to access the SNMP interface from 10.1.1.20.

and also from my juniper switches i get this errors, and i see that the string what i configuret are not used :
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (cascade) 2011-09-26 14:00:29 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (internal) 2011-09-26 14:00:28 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (cascade) 2011-09-26 14:00:28 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (internal) 2011-09-26 14:00:27 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (cascade) 2011-09-26 14:00:27 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (internal) 2011-09-26 14:00:26 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (cascade) 2011-09-26 14:00:26 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (internal) 2011-09-26 14:00:25 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (admin) 2011-09-26 14:00:25 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (secret) 2011-09-26 14:00:24 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (admin) 2011-09-26 14:00:24 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (secret) 2011-09-26 14:00:23 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (admin) 2011-09-26 14:00:23 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (secret) 2011-09-26 14:00:22 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (admin) 2011-09-26 14:00:22 CEST
snmpd notice SNMPD_AUTH_FAILURE nsa_log_community: unauthorized SNMP community from 10.1.1.20 to unknown community name (secret) 2011-09-26 14:00:21 CEST