cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

can't query snmp on juniper SRX 210

I have setup communities on juniper SRX 210, but can't seem to query any snmp data from the device.  I had it working on the trial version, but now since we moved it to a new server things have changed.  Here is my configuration on juniper device.

 

interfaces {
    interface-range interfaces-trust {
        member ge-0/0/1;
        member fe-0/0/2;
        member fe-0/0/3;
        member fe-0/0/4;
        member fe-0/0/5;
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/0 {
        unit 0 {
            description "WAN port";
            proxy-arp;
            family inet {
                filter {
                    input cflow;
                    output cflow;
                }
                address 12.132.129.254/17;
            }
        }
    }
    fe-0/0/6 {
        unit 0 {
            family ethernet-switching;
        }
    }
    fe-0/0/7 {
        unit 0 {
            family inet {
                address 10.10.10.1/24;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 127.0.0.1/32;
            }
        }
    }
    vlan {
        unit 0 {
            family inet {
                filter {
                    input cflow;
                    output cflow;
                }
                address 172.16.0.2/16;
            }
        }
        unit 4 {
            family inet {
                address 192.168.160.253/24;
            }
        }
    }
}
forwarding-options {
    sampling {
        input {
            rate 1;
            run-length 0;
            max-packets-per-second 10000;
        }
        family inet {
            output {
                flow-server 172.16.0.82 {
                    port 2055;
                    version 5;
                }
            }
        }
    }
}
snmp {
    client-list snmpusers {
        172.16.0.82/32;
    }
    community private {
        authorization read-write;
        clients {
            172.16.0.3/32;
            172.16.0.82/32;
        }
    }
    community orion {
        authorization read-only;
        clients {
            172.16.0.82/32;
        }
    }
    community public {
        authorization read-write;
        clients {
            172.16.0.82/32;
        }
    }
    traceoptions {
        file size 10000 files 2 world-readable;
    }
}

Any help on this would be great.

0 Kudos
1 Reply

You need to enable SNMP on your "Trusted" interface for example:

191:  interfaces { 
192:       ge-0/0/1.0 { 
193:            host-inbound-traffic { 
194:                system-services { 
195:                    http; 
196:                    https; 
197:                    ssh; 
198:                    dhcp; 
199:                    snmp; 
200:                    ping; 
201:                 }

I hope that Helps..

Ken

0 Kudos