Help with a step by step config guide on how to enable traps on cisco devices for various events

I have been tasked with configuring enhanced alerting from our global network devices.

We have a solarwinds NPM/ORION solution up and running.

However, there are servers/firewalls amongst the cisco routers and switches.

My job is to have the cisco routers report routing information (we run eigrp - so any data related to that would be very helpful). My other job is to have the switches report information re: Spanning-tree etc...

i have configured logging on the networking devices. but i am stuck on which traps to enable - since configuring logging enable traps - just fires everything up, and i dont think we need that level of information.

Also when i did get a trap firing - i got the OID / Community info in clear text... in the email message.

Can someone (preferably someone who has worked on cisco devices in particular) point me in the right direction here. Maybe someone has written a step by step guide on this type of project that they wouldnt mind sharing?

thanks in advance,

very frustrated guy!

Find more posts tagged with

traps

mib_oid

cisco_modules

cisco_3750

cisco_asa_hardware

traps_alerts

cisco_6509-e

cisco_traps

cisco_ios_xr

mib

mib_database

traps_reports

trap

Accepted answers

All comments

jeff.stewart

This might help;

www.cisco.com/.../technologies_tech_note09186a0080094a05.shtml

hitesh1230

thanks!

Ok, so i have to configure the snmp-server enable traps xxx--- whatever traps i want. I got that part.

what i would also need is what else do i need to install/load on EITHER Orion/cisco devices so that i dont see the OIDs but rather some nice clear text message..

This is what a "snmp-server enable traps config" shows me:

The message below being received by upper management is an official warning for me

My understanding is that based on the OID - the NMS should match it to some message and send it on, correct? do i need to download any MIB files from cisco and load it into solarwinds, or vice versa?

12/28/2010 11:01 : CISCO-CONFIG-MAN-MIB:ciscoConfigManEvent SNMP Trap

Received Time:12/28/2010 11:01:57 AM

Source:10.20.241.168(mlandolfi-vpn-01)

Community:c1sc0!123

Variable Bindings

sysUpTime:= 20 days 20 hours 6 minutes 36.52 seconds (180039652)

snmpTrapOID:= CISCO-CONFIG-MAN-MIB:ciscoConfigManEvent (1.3.6.1.4.1.9.9.43.2.0.1)

ccmHistoryEventCommandSource.61:= commandLine(1) (1)

ccmHistoryEventConfigSource.61:= 3

ccmHistoryEventConfigDestination.61:= 2

jeff.stewart

You actual define the message you want sent based off the trap received. So with the trap you've displayed, you're being notified that the configuration has changed on 10.20.241.168. If you pair this with NCM it will actual do a comparison of the old config and the new config and send you the details of the change.

Let me know if I'm not answering what you're asking.

Jeff

netlogix

Jeff... What! You can do that! Wow! sorry, don't mean to hi-jack the thread, but so, as soon as a sessions exits conf t, the trap/syslog (does it have to be based on the trap, or could it be the syslog event?) goes to orion, but how do you kick off the config download? Is is a every device poll, or just the one where someone came out of "conf t"? I really want to set that up!