Notifications

1244 views

Description

We need to prevent any SNMP OID Classifications being added with a Net-SNMP module OID starting 1.3.6.1.4.1.8072.3.2. to avoid mis-Classification and wrong Model names

Those OIDs belong to the free Net-SNMP Module (http://www.net-snmp.org/), which is used to implement SNMP in many networked devices, however sometimes manufacturers fail to replace the default template System OID with their own specific to the Manufacturer's Model. 

If an OID record has been entered with one of these - e.g. a specific Printer - and another device is scanned - e.g. a Router - then that router CI will end up in the Printer table. That record will always override the automatic classification, and make/model code.

The following OIDs need to be blocked from being entered in the OID table in the instance. They all start 1.3.6.1.4.1.8072.3.2.

1.3.6.1.4.1.8072.3.2.1 hpux9
1.3.6.1.4.1.8072.3.2.2 sunos4
1.3.6.1.4.1.8072.3.2.3 solaris
1.3.6.1.4.1.8072.3.2.4 osf
1.3.6.1.4.1.8072.3.2.5 ultrix
1.3.6.1.4.1.8072.3.2.6 hpux10
1.3.6.1.4.1.8072.3.2.7 netbsd
1.3.6.1.4.1.8072.3.2.8 freebsd
1.3.6.1.4.1.8072.3.2.9 irix
1.3.6.1.4.1.8072.3.2.10 linux
1.3.6.1.4.1.8072.3.2.11 bsdi
1.3.6.1.4.1.8072.3.2.12 openbsd
1.3.6.1.4.1.8072.3.2.13 win32
1.3.6.1.4.1.8072.3.2.14 hpux11
1.3.6.1.4.1.8072.3.2.15 aix
1.3.6.1.4.1.8072.3.2.16 macosx
1.3.6.1.4.1.8072.3.2.255 unknown

Devices known to use one of these OIDs, usually the linux one 1.3.6.1.4.1.8072.3.2.10, include:

  • Riverbed Technology, SteelCentral Flow Gateway/User Interface Module
  • Aruba Network, CP-HW-5K IP Router
  • Dell, iDRAC7 Remote Access Controller / Out-of-band SNMP Agent for Remote Access
  • ExtraHop, Discover 8100
  • Intermec, PM43 Printer
  • IBM, ISAM Server
  • Barracuda, SPAM Firewall
  • Brocade, Virtual Traffic Manager
  • Check Point Smart-1 3050 Firewall
  • Blue Coat DLP2700
  • SourceFire Intrusion Detection
  • RSA Token Server
  • Netgear ReadyNAS
  • A10 Load Balancers
  • McAfee Email Gateway
  • Peplink Balance
  • Sophos UTM Firewall

Steps to Reproduce

  1. Add an OID 1.3.6.1.4.1.8072.3.2.10 for "Intermec PM43" Printer, for Printer Classifier, and Printer class
  2. Discover a Aruba Network, CP-HW-5K IP Router, which also uses this OID
  3. A Printer CI will be created

Workaround

This problem is currently under review. You can contact ServiceNow Technical Support or subscribe to this Known Error article by clicking the Subscribe button at the top right of this form to be notified when more information will become available.

There is no way to use these OIDs for Classification, as they are not unique. If experiencing this issue, then the solution is to delete the OID record so that it isn't used, and so can't cause problems with mis-classification or assigning the wrong Model. The friendly model name entered in the OID record will then not be used.

SNMP with then have to fall back to other sources of data to classify the device and set Model information, which should still work if the SNMP implementation is fairly standard. If those model names generated by that process need to use the friendly model name that had been in the OID record, then Field Normalization could be used to update/normalize those model names instead.

If the device still cannot be classified, then a new SNMP Classification can be created that checks for data that will be there for this specific device, such as a string in sysDesc.


Related Problem: PRB1349444

Seen In

Dublin EA 8
Fuji Patch 11
Fuji Patch 12 Hot Fix 1
Fuji Patch 6
Fuji Patch 9
Helsinki Patch 1 Hot Fix 1
SR - IRM - Audit Management - New York 2019 Q3
SR - IRM - GRC Profiles - Madrid 2019 Q2
SR - IRM - GRC Workbench - New York 2019 Q3
SR - IRM - PA Premium Integration - New York 2019 Q3
SR - IRM - Policy and Compliance - Madrid 2019 Q2
SR - IRM - Risk Management - New York 2019 Q3
SR - ITOM - CMDB CI Class Models - 201908
SR - ITOM - CMDB CI Class Models - 201909
SR - ITOM - Discovery and Service Mapping - 201908
SR - ITOM - Discovery and Service Mapping - v1.0.35

Intended Fix Version

Paris

Fixed In

New York Patch 9
Orlando Patch 3

Safe Harbor Statement

This "Intended Fix Version" information is meant to outline ServiceNow's general product direction and should not be relied upon in making a purchasing decision. The information provided here is for information purposes only and may not be incorporated into any contract. It is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. The development, release, and timing of any features or functionality described for our products remains at ServiceNow's sole discretion.

Associated Community Threads

There is no data to report.

Article Information

Last Updated:2020-06-28 20:08:48
Published:2020-03-09