I am not able to define the RO RW community strings in my ASA5520 ver 8.1. How do i get NPM to monitor that device? It gives error message that is unknown
you have to use SNMP v3 to authenticate: Here is the comman ref for 8.1
ASA5520# show run | in snmp
snmp-server group snmpgroup v3 priv
snmp-server user xxxxxx snmpgroup v3 encrypted auth md5 ad:a3:80:3d:1c:87:80:2c:5e:f9:43:15:da:62:25:e9 priv des ad:a3:80:3d:1c:87:80:2c:5e:f9:43:15:da:62:25:e9
snmp-server host inside 10.150.11.14 version 3 uwhadmin
snmp-server location xxxxxxxx
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
You don't need the RW, just the RO. If you are unable to get an RO, SNMP cannot be used to monitor it. You can monitor it for availibility via Ping if it responds to pings.
The command I use on my ASA looks something like this:
snmp-server host outside xxx.xxx.xxx.xxx poll community yyyyy
where xxx = the npm servers ip address and yyyyy = your community string
Here is a link to the cisco documentation
http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/monitor.html
