{"id":4781,"date":"2023-02-03T18:55:00","date_gmt":"2023-02-04T00:55:00","guid":{"rendered":"https:\/\/www.incredigeek.com\/home\/?p=4781"},"modified":"2023-02-04T12:40:26","modified_gmt":"2023-02-04T18:40:26","slug":"bulk-update-snmp-v3-settings-for-devices-in-librenms","status":"publish","type":"post","link":"https:\/\/www.incredigeek.com\/home\/bulk-update-snmp-v3-settings-for-devices-in-librenms\/","title":{"rendered":"Bulk Update SNMP v3 Settings for Devices in LibreNMS"},"content":{"rendered":"\n

With support for DES being dropped<\/a>, you may be faced with having to upgrade device settings to AES. In this post we’ll explore changing the settings in LibreNMS for all Mikrotik devices and then touch on making changes to a group of Mikrotik devices.<\/p>\n\n\n\n

Upgrading SNMP Settings for Devices in LibreNMS<\/h2>\n\n\n\n

In LibreNMS, we can go to Device -> Device Settings (Gear on the right hand side) -> SNMP, to set the SNMP settings for that device.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Since this would get rather boring to change on multiple devices, and these settings are all in a MySQL database, we can skip using the mouse and use a few MySQL commands to update multiple devices at once.<\/p>\n\n\n\n

Log into the LibreNMS server over ssh and then connect to the MySQL database<\/p>\n\n\n\n

mysql -u librenms -p librenms<\/pre>\n\n\n\n
First we can get a list of all the devices (Mikrotik routers in this example) and show the hostname with the SNMP authentication and cryptography algorithms.<\/p>\n\n\n\n
select hostname,authalgo,cryptoalgo from devices where os=\"routeros\";<\/pre>\n\n\n\n
Now if we want to update the cryptography settings for all of our Mikorotik devices, we can do the following.<\/p>\n\n\n\n
update devices cryptoalgo set cryptoalgo=\"AES\"  where os=\"routeros\";<\/pre>\n\n\n\n
This will set all of the devices to use AES for the cryptography algorithm.<\/p>\n\n\n\n
We can also change the authentication algorithm to SHA with this<\/p>\n\n\n\n
update devices authalgo set authalgo=\"SHA\"  where os=\"routeros\";<\/pre>\n\n\n\n
\"\"<\/a>
LibreNMS update device SNMP settings<\/figcaption><\/figure>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
Bulk updating of Network Devices<\/h2>\n\n\n\n
The bottom “script” can be used for changing SNMP settings on multiple Mikrotik devices.  <\/p>\n\n\n\n
Create a mikrotik.lst file with all the IP addresses of all the devices you need to update.  Can you use the above MySQL commands to get a list from LibreNMS.<\/p>\n\n\n\n
Change the following options in the script<\/p>\n\n\n\n