Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Noob here, question on SNMPv3 on Cisco devices and NPM

I've read over some Cisco configurations and most show that you need to state a hostname or ip address in order for the device to know where to send it's SNMP information. I recently started with a new company and some devices are configured with only these commands:

snmp-server group MyGroup v3 priv match exact read OrionNPM

snmp-server view OrionNPM internet included

snmp-server view OrionNPM system included

snmp-server view OrionNPM interfaces included

snmp-server view OrionNPM chassis included

So my question is, based off of this configuration how is NPM obtaining information on the device when there is no config specifying where to send SNMP info? TIA for your help!Cisco

Find more posts tagged with

SNMP

cisco

Configuration

Accepted answers

mmelton

Specifying an IP address is for sending SNMP traps. The device can still poll the router using the proper SNMPv3 credentials, it just may not receive SNMP traps.

All comments

mmelton

Specifying an IP address is for sending SNMP traps. The device can still poll the router using the proper SNMPv3 credentials, it just may not receive SNMP traps.

hh1977

do you have this command

snmp-server host <ip of NPM> version 3 priv <snmpv3 username>

markmattix

hh1977, some other devices on the network have that statement which lead me to believe it was needed for any SNMP information to get back to NPM.

Michael Melton, so is this statement "snmp-server group MyGroup v3 priv match exact read OrionNPM" enough to enable NPM to poll the device and receive information from it? Does this statement say to make the device part of the MyGroup group, and to allow OrionNPM to poll it? Thanks

zizi

Orion NPM polling requires read access to you device over SNMP. You don't need to configure traps, unless you want Orion to collect them.

To configure SNMPv3 polling on a Cisco device, you may want to:

Define an user group, create and assign a view to the group
Define an user account, assign account to the group
Include OIDs to the view, to make them accessible

snmp-server group testgroup v3 auth read testview

Group is a logical user management unit, which allows user to define certain security restrictions for multiple user accounts. View is something like ACL for SNMP MIB content. You can specify, which parts of MIB are included into view, which allows you to limit access to certain parts of the MIB tree for specific users. Command above creates a new group with name "testgroup", enforces SNMPv3 authentication and assigns "testview" view to it. It means that all users assigned to "testgroup" have granted read access to all OIDs which are included into "testview" view.

snmp-server user testuser testgroup v3 auth md5 changeme

Command above creates a new user with name "testuser" and assigns it to the group "testgroup". User "testuser" is now able to access all information accessible for "testgroup". It also configures password "changeme" for the user and specifies that SNMP agent should use MD5 hash algorithm for "password verification".

snmp-server view testview system included

snmp-server view testview 1.3.6.2.4 included

snmp-server view testview interfaces included

Commands above add system and interfaces MIB sub-trees into "testview" view. This allows access to those parts of the MIB for "testuser" user and all other users, which belong to "testgroup" group. First and second commands are equal, the second one is just using OID instead of MIB family name.

You can use http://tools.cisco.com/Support/SNMP/do/BrowseOID.do to translate OIDs into readable names and vice verso.

markmattix

First of all, thank you Zizi for your response, it was very informative and helpful. I have a new question regarding SNMPv2c though. I'm trying to setup a device that measures the temperature in my company's server room and have successfully got NPM to recognize the device and it's Ethernet port but it doesn't seem like it's noticing the traps the device sends of temperature information.

The device (MicroGoose by IT Watchdogs) has the following SNMP options:

SNMP Service:

Temperature Precision:

Read Community:

Listen port for GET:

Trap Community:

Write Community:

Trap Type:

Trap IP Address:port 1:

Trap IP Address:port 2:

There are also options for configuring SNMPv3 but I've decided to only use v2c to make things easier, not concerned with v3 security as it will stay within our internal network.

I would like to be able to configure NPM to accept the traps the temperature monitor sends and have NPM alert me via e-mail.

Also, where in NPM can I create a new Community String for use in SNMPv2c? Thanks for any help!

zizi

Orion uses one set of SNMP credentials for polling and for traps receiving. It means you need to add your device as SNMP node to Orion and use the same community string for configuring traps. Basically it should be enough to specify Orion polling engine IP address as trap destination in device configuration and configure the same community string, which was used for adding a node into Orion.