SNMP Cisco IOS

Configuration

• Allows all NMS's to manage the device
• Supports both version 1 and 2c

• Read-only access

snmp-server community ciscodisco RO

• Read-write access

snmp-server community ciscodisco RW

• Only allow the NMS 1.1.1.1

snmp-server community ciscodisco RO 2
access-list 2 permit 1.1.1.1

• SNMPv3
• Choose one of the security models

snmp-server group snmp-group v3 priv
or
snmp-server group snmp-group v3 auth
or
snmp-server group snmp-group v3 noauth

• Create a user and associate it with a group, specify the passwords and encryption

snmp-server user snmp-user snmp-group v3 auth sha ciscodisco priv des56 ciscodisco

SNMP traps

• Enable certain traps

snmp-server enable traps config-copy
snmp-server enable traps bgp
...

• Enable all traps

snmp-server enable traps

• Control which traps are sent to who

snmp-server host 1.1.1.1 ciscodisco bgp
snmp-server host 2.2.2.2 ciscodisco config-copy

SNMPv1 traps

snmp-server host 1.1.1.1 version 1 ciscodisco

or

snmp-server host 1.1.1.1 ciscodisco

SNMPv2 traps

snmp-server host 1.1.1.1 version 2c ciscodisco

SNMPv3 traps

snmp-server host 1.1.1.1 version 3 priv snmp-user

SNMP Informs

snmp-server enable traps
!
snmp-server host 1.1.1.1 informs version 2c ciscodisco