Difference between revisions of "SNMP Cisco IOS"

Revision as of 09:01, 25 June 2009 (view source) Sahan109 (talk | contribs) (→‎SNMPv3) ← Older edit		Revision as of 09:02, 25 June 2009 (view source) Sahan109 (talk | contribs) (→‎SNMPv3) Newer edit →
Line 22:		Line 22:
	* Create a user and associate it with a group, specify the passwords and encryption		* Create a user and associate it with a group, specify the passwords and encryption
	<pre>snmp-server user snmp-user snmp-group v3 auth sha ciscodisco priv des56 ciscodisco</pre>		<pre>snmp-server user snmp-user snmp-group v3 auth sha ciscodisco priv des56 ciscodisco</pre>
		+	*Syntax
		+	<pre>
		+	</pre>snmp-server user username groupname [remote ip-address [udp-port port]] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password]} [access access-list]</pre>
	==SNMP traps==		==SNMP traps==

---

Revision as of 09:02, 25 June 2009

Configuration

• Allows all NMS's to manage the device

SNMPv1+v2

• Read-only access

snmp-server community ciscodisco RO

• Read-write access

snmp-server community ciscodisco RW

• Only allow the NMS 1.1.1.1

snmp-server community ciscodisco RO 2
access-list 2 permit 1.1.1.1

SNMPv3

• Choose one of the security models

snmp-server group snmp-group v3 priv
or
snmp-server group snmp-group v3 auth
or
snmp-server group snmp-group v3 noauth

• Create a user and associate it with a group, specify the passwords and encryption

snmp-server user snmp-user snmp-group v3 auth sha ciscodisco priv des56 ciscodisco

• Syntax

snmp-server user username groupname [remote ip-address [udp-port port]] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password]} [access access-list]</pre>

SNMP traps

• Enable certain traps

snmp-server enable traps config-copy
snmp-server enable traps bgp
...

• Enable all traps

snmp-server enable traps

• Control which traps are sent to who

snmp-server host 1.1.1.1 ciscodisco bgp
snmp-server host 2.2.2.2 ciscodisco config-copy

SNMPv1 traps

snmp-server host 1.1.1.1 version 1 ciscodisco

or

snmp-server host 1.1.1.1 ciscodisco

SNMPv2 traps

snmp-server host 1.1.1.1 version 2c ciscodisco

SNMPv3 traps

snmp-server host 1.1.1.1 version 3 priv snmp-user

SNMP Informs

snmp-server enable traps
!
snmp-server host 1.1.1.1 informs version 2c ciscodisco