How we configure SNMP V3 trap in solarwinds

KJAYKUMAR - Can you please clarify your question?  SNMP V3 traps are not configured in Solarwinds, it's configured on the devices that Solarwinds manages.  Are you saying that you're not seeing traps from equipment configured with SNMP v3?  If so what type of device is it and can you supply an example of the devices configuration?

Hi bourlis,

                Thanks for your reply.Actually we have Cisco ISR router with following configuration for V3 Trap

Configuration SNMP V3

1,Security level:Auth with privacy

2,Username

3,Authentication password

4,Authentication protocol

5,Privacy protocol

6,Privacy password

We have sending some testing trap from the Cisco ISR router But it didnot received in Solarwinds.Only V1/v2 Trap are received with Any community but we V3 trap are not received.

So please share how we receiving the V3 trap in solarwinds

I was actually looking for an edited example of your SNMPv3 settings.  None-the-less, I found a couple of roadblocks with our Cisco equipment when we migrated over to SNMPv3. A key item that I found is the command line "snmp-server trap-source" command line. I found that traps would come from different interfaces, or IP addresses and Solarwinds would ignore them as they weren't coming from the managed IP address.

Below is an example of our SNMPv3 configuration.  This configuration grants Solarwinds SNMPv3 read-write access to our equipment  we also limit the type of traps we want the equipment to send out:

     snmp-server view <View Pass Phrase>  iso included

     snmp-server group <Group Name> V3 priv write <View Pass Phrase>

     snmp-server user <User Name> <Group Name> v3 auth SHA <Auth Pass> priv AES 128 <Priv Pass>

     snmp-server group <Group Name> v3 auth context vlan- match prefix

     snmp-server group <Group Name> v3 priv context vlan- match prefix 

     snmp-server trap-source <Interface that's managed by Solarwinds>

     snmp-server location <location info>

     snmp-server contact <contact info>

     snmp-server system-shutdown

     snmp-server enable traps snmp coldstart warmstart

     snmp-server enable traps envmon

     snmp-server enable traps flash insertion removal

     snmp-server enable traps config

     snmp-server enable traps entity

     snmp-server enable traps cpu threshold

     snmp-server enable traps syslog

     snmp-server enable traps vtp

     snmp-server host <Trap Destination IP Address>  version 3 auth <User Name>

Here's the same config with a more real-world example:

     snmp-server view Purple iso included

     snmp-server group Orange V3 priv write Purple

     snmp-server user Superman Orange v3 auth SHA Red priv AES 128 Blue

     snmp-server group Orange v3 auth context vlan- match prefix

     snmp-server group Orange v3 priv context vlan- match prefix

     snmp-server trap-source loopback0

     snmp-server location Someplace

     snmp-server contact Ghostbusters

     snmp-server system-shutdown

     snmp-server enable traps snmp coldstart warmstart

     snmp-server enable traps envmon

     snmp-server enable traps flash insertion removal

     snmp-server enable traps config

     snmp-server enable traps entity

     snmp-server enable traps cpu threshold

     snmp-server enable traps syslog

     snmp-server enable traps vtp

     snmp-server host 10.10.10.10  version 3 auth Superman

Compare your config to this one and make any changes and then please let me know if it helped. 

Hi bourlis,

                Thanks for your reply.Actually we will suggest our team to configure the cisco router with above mentioned configuration.But yesterday we have check one more network device with solarwinds.We have configure the SNMP V3 trap for the Fortigate firewall in our envirnoment.

Then we have send some traps for testing the solarwinds to receieving the SNMP v3 trap.But we didnot receiving any thing.But V1,V2 traps are received normally.

So kindly please answer below question regarding SNMP v3 trap in solarwinds

(1).we need the any special configuration for receiving the SNMP v3 trap in solarwinds dashaboard(In the solarwinds side not in Network device side because we have already configure SNMP V3 Traps)".

(2).If it is possible to receiving the SNMP v3 trap means then how we receiving multiple Network devices traps with one Solarwinds dashboard.

(2).SNMP V1,V2  are received with any community string.But we want only specified community string traps are received in solarwinds dashboard.

Regards,

Jaykumar

Jaykumar, I honestly don't recall making any special changes to Solarwinds to receive and process SNMP v3 traps.  According to Solarwinds support docs "Trap View Support for SNMPv3"  and "Create alert based on a SNMPv3 trap condition" it pretty much comes down to the configuration of the device you're trying to managed.

However, you can always do a packet capture from your managed device to your Solarwinds installation just to confirm if your devices are sending out SNMPv3 traps.  If I were you I would do the following test:

• Setup a lab device with SNMPv1/v2 and configure it to send all forms of traps to Solarwinds
• Do a packet capture with Wireshark or whatever.
• Run a simple test to capture SNMP traps.
• Then remove SNMPv1/v2 and configure it for SNMPv3, but with no auth/priv.  You want as basic of a SNMPv3 configuration as possible.
• Repeat the above test.  If you capture the SNMPv3 traps then there's something wrong with your Solarwinds and I would open a ticket with support.  If you don't capture a SNMPv3 trap then you know the problem is with your configuration.

The key to the test is you want to capture a known good trap, then introduce a simple basic SNMPv3 trap and then work your way up to a full auth/priv SNMPv3 trap configuration.  This would be the best way of knowing there the problem is.

have you added the device in solarwinds for which you are sending test traps?

In order for SolarWinds to accept SNMPv3 Traps, you must be monitoring the device using the same credentials that you are using to send the Traps.

Hi bourlis,

                Thanks for your reply.We will suggest our team to do the above mentioned ways for test the SNMP V3 traps in solarwinds.

We will check and come back to you.Thank you very much

Hi pratikmehta,

                        Thanks for your reply.Actually we didnot add any devices (for monitoring) in solarwinds for receiving SNMP V3 trap.Because we didnot add our cisco router(in SNMP v1/v2) but we receiving(in solarwinds) the trap from device(router).

For the same we have done for the SNMP v3 trap(Configuration in router) and sending the Some test trap from router we didnot received any SNMP v3 trap in solarwinds.

we have question regarding the Snmp V3 traps in solarwinds.

Please providing the solution for below mentioned questions

1,If we want receiving the SNMP v3 traps in solarwinds means we want add the device in the Solarwind for monitoring or we have any special configuation in solarwinds for receiving SNMP v3 traps.

2.How we receiving the SNMP v3 trap from mutliple network devices in solarwinds.