<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Stephen and I went to visit Rattlesnake yesterday to figure out
what's wrong. The building had power, but the new UPS was powered
off. Its network control card had a light, indicating it was alive,
just no network to link to. I pulled the 120V plug, and a relay
clicked but UPS did not change state. I restored 120V power, and a
relay clicked but UPS did not change state. I unplugged/replugged
the display, and it flashed all LEDs and went back to indicating off
state (no LEDs). Finally I pressed power button and everything
powered back up normally.<br>
<br>
I suspected the UPS software had been unintentionally set to stay
powered off after it ran out of battery juice, and then power was
restored. I checked the settings thoroughly, and everything looks
like it was set to tell the UPS to power back on after it had shut
down from battery exhaustion. Only a test will verify this is
indeed working as intended though.<br>
<br>
I started setting up event notification from the UPS and making sure
our management system can monitor it too, and noticed something
really weird. <b>The defaults in the UPS software apparently leave
a write-enabled SNMP account with the default credentials of
"private", with access allowed from anywhere (IP 0.0.0.0).</b>
I'm now wondering if someone intentionally sent an SNMP write
command to some OID that told the UPS to power off? Does anyone
have experience with APC UPSes that can verify these insane defaults
and that there is some OID that can command the UPS to power off?<br>
<br>
SNMP write access has been disabled on both new UPSes now, and
firewall rules installed to prevent general internet access.<br>
<br>
--Bart<br>
<br>
<br>
<div class="moz-cite-prefix">On 2/28/2021 3:37 PM, Bart Kus wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1cfd8183-fee2-405d-9078-560296d8d78c@bartk.us">No, the
DMR repeater is in the smaller shack, which has its own backbone
feed from Baldi. That half of Rattlesnake is alive.
<br>
<br>
--Bart
<br>
<br>
<br>
On 2/28/2021 12:28 PM, Stephen Kangas wrote:
<br>
<blockquote type="cite">If the DNR shack had power out, wouldn't
that also break the inet link for the AF7PR DMR repeater inet
linkage that is hard-wired from the smaller secast shack? That
repeater is still linked (just tested it via Parrot).
<br>
<br>
Stephen W9SK
<br>
<br>
<br>
-----Original Message-----
<br>
From: PSDR <a class="moz-txt-link-rfc2396E" href="mailto:psdr-bounces@hamwan.org"><psdr-bounces@hamwan.org></a> On Behalf Of Bart Kus
<br>
Sent: Sunday, February 28, 2021 12:23 PM
<br>
To: <a class="moz-txt-link-abbreviated" href="mailto:netops@hamwan.org">netops@hamwan.org</a>; Puget Sound Data Ring
<a class="moz-txt-link-rfc2396E" href="mailto:psdr@hamwan.org"><psdr@hamwan.org></a>
<br>
Subject: [HamWAN PSDR] Rattlesnake DNR shack is down
<br>
<br>
It looks like the DNR building is completely without power. I
tried to check if UPS2.Rattlesnake was on battery, but the DHCP
server is in the DNR building so the UPS lost its lease. I'm
about to head out here for something else, but maybe someone can
stand up a temporary DHCP to get the UPS back online and check
battery status.
<br>
<br>
--Bart
<br>
<br>
_______________________________________________
<br>
PSDR mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:PSDR@hamwan.org">PSDR@hamwan.org</a>
<br>
<a class="moz-txt-link-freetext" href="http://mail.hamwan.net/mailman/listinfo/psdr">http://mail.hamwan.net/mailman/listinfo/psdr</a>
<br>
<br>
_______________________________________________
<br>
PSDR mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:PSDR@hamwan.org">PSDR@hamwan.org</a>
<br>
<a class="moz-txt-link-freetext" href="http://mail.hamwan.net/mailman/listinfo/psdr">http://mail.hamwan.net/mailman/listinfo/psdr</a>
<br>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>