Is there a tool to change the SNMP community string in multiple devices?

Hello,

We have over 500 devices - printers, network scanners, switches, routers, servers, specialized network devices, all with their default snmp community strings. We know what the strings are, and so does everyone else.

We would like to change them all in one go but lack the programming capabilities to do. Is there a tool/utility/script that can assist us in this securing exercise?

Thank you.
LVL 21
netcmhAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ken BooneNetwork ConsultantCommented:
Wow.  So the short answer is no.  If say you had a cisco network and were using there management tools, the old ciscoworks or the newer prime infrastructure - and the devices were already set up in the tool, then yes you could push the changes out to all the CISCO devices.   That still would leave you with printers - I'm sure various manufacturers, scanners, servers, and specialized network devices.

The only way that I know for this to be done is if you were already managing everything through a super expensive high level management tool like HP open view that worked with all of the providers management tools etc.. to push these changes out.

Its easy to monitor all of these devices, but making changes to multiple manufacturers equipment in one shot would take a very expensive and sophisticated system.
0
netcmhAuthor Commented:
Glad you brought that topic up. I'm looking for something open source or freeware.
0
Ken BooneNetwork ConsultantCommented:
BTW for switches and routers (and I am assuming we are talking about commercial level equipment not consumer stuff you get from best buy) there are several tools that you can purchase that can help you.   Solarwinds - Network Configuration Manager, Cisco Prime Infrastructure to name a few.  There is probably something else out there for pushing changes out to your windows servers.  The rest of the stuff you are probably going to have to do manually.
0
What were the top attacks of Q1 2018?

The Threat Lab team analyzes data from WatchGuard’s Firebox Feed, internal and partner threat intelligence, and a research honeynet, to provide insightful analysis about the top threats on the Internet. Check out our Q1 2018 report for smart, practical security advice today!

Ken BooneNetwork ConsultantCommented:
For monitoring via open source there are a ton of tools available.  I like Cacti with several of its plugging.  The easiest distribution to get up and running is cactiez.  It can be downloaded here:
http://cactiez.cactiusers.org

That is for monitoring, alerting, but its biggest feature is historical bandwidth reporting.
0
netcmhAuthor Commented:
I'm still holding out for any scripts, utilitites or tools that could help.
0
Fred MarshallPrincipalCommented:
Ken Boone gave you a good answer.
The problem goes like this:
1) Make a list of all the devices involved.
2) Add their method of interfacing.  You will likely be using their command line interface for something like this - so list the command line interface type/language/etc.
3) For each different type of interface, you will need a script to march through the login (username and password generally required), select the needed menu item or issue the appropriate commands otherwise, get to the SNMP settings and set the String.

Unless you have one manufacturer of networked equipment throughout (which is unlikely) then you are going to have to develop the scripts for possibly each device separately! (worst case).  That's a lot of fiddling around and debugging, etc.
Better to bit the bullet and do it manually.  You'll complete the task much faster.

But, if you insist, I'd start with ExtraPuTTY and see if you can do it on at least ONE device first - i.e. automate a login with script.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
netcmhAuthor Commented:
No solution found. Closing.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Management

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.