I have ASA running version 8.2.5 and using snmp v3 as below;
snmp-server group Authentication&Encryption v3 priv
snmp-server user SNMP_TEST Authentication&Encryption v3 encrypted auth md5 cisco123 priv aes 128 password123
snmp-server host IN 10.10.10.110 version 3 SNMP_TEST
LMS device credential is as per above SNMPv3 config.Can't get this to work. Digging aroung but no avail. I also try this on ASA 9.1 but same result.
My network is currently running with SNMP v2 configured in easch devices. With snmp v2 our LMS 3.2 server is working fine. However we have planned to migrate our network to snmp v3 . I have configured my few devices for SNMP v3 and added them to my LMS server.
Except DFM module these new SNMP v3 devices are working fine in all other modules. In DFM these devices are reflecting under "snmp timeout" group. I checked with device center -> management station to device; where the SNMP v3 connections are showing "okey"
following are tyhe configuration i have done in my devices.
snmp-server group v3g v3 priv read testr write testw
snmp-server user v3u v3g v3 auth md5 test123
snmp-server view testr iso in
[Code].....
Cisco 2621XM running 12.2.Would like to configure MRTG on an outside box for monitoring & would love some assistance with getting SNMP up and working.
-My outside box is 38.117.168.x
-Router outside interface is 38.117.168.x1
When i try and run cfgmaker from my mrtg box im receiving an snmpwalk problem and no info could be retrieved..
I recently picked up a Catalyst 2960G and am trying to get SNMP management working over IPv6. I have the IP Address set to the local link, and can successfully ping and telnet to the switch (so the network can get traffic to and from the switch). However, SNMP packets just seem to disappear. I am running WireShark on my machine, and I see the packets go out to the proper IP, but nothing comes back. When I check "sho ipv6 traffic", I can see where there are UDP packets that are received, but, again, none going out. Also, when I run "sho snmp", all of the packet counts are 0.
Here are some relavant snipets from my "sho run":
interface Vlan1
no ip address
no ip route-cache
ipv6 enable
[code]....
WS-C2960G-24TC-L 12.2(25)SEE3 C2960-LANBASE-M
I would like to get the temperature status from this 2960 switch (and several other models. Normally this OID should be:.1.3.6.1.4.1.9.9.13.1.3.1.6 But it does not return anything.
The termperature status can be found from the command line by running:"sh env temp" This reports back ok, so I assume there is a temperate gauge in the switch.
This oid is part of the "CISCO-ENVMON-MIB" mib and accouding to the Cisco MIB selector it is supported on my switch and IOS - 12.2(25).
(Another thing I woudl like to monitor and should be supported is the fan status oid (.1.3.6.1.4.1.9.9.13.1.4.1.3). That doesn't return anything either.
What do I need to do to get the temperature environment status from SNMP query?
is it possible to get SNMP v3 on a Cisco ACS ?
View 1 Replies View RelatedI need to SNMP on Cisco Smart switch SF-200 24p. I cannot find any option on administration to turn snmp service on.
View 2 Replies View RelatedI'm not finding where set the snmp community on VPN 3000. I need read flow date on Ethernet interfaces. but I'm able only get traps from VPN 3000 to a system snmp but I don't get read from snmp community to VPN 3000.
where and how to I can configuration the snmp community on VPN 3000.
Is is possible to monitor bandwidth utilization of a PAT on an ASA? We're running version 8.2.
View 1 Replies View RelatedI have not used the ACS5.1 yet so watch out for the easy questions
1) Is it possible to generate report for the users who are inactive for say last 30 days? Customer is looking to audit these users to see if they really need access to any device.
2) Are there any known issues while assigning the priviligaes level to users. In current implementation of this customer users are always logged into priv 1 though they are assigning the priv level of 5. I understand with ACS 4.x we can enable the exec process and assign the priv under user/group policy. What are the configurations that customer might be possiby missing in this case?
3) Is there any SNMP or other notification available in ACS 5.1 where admin can be notified at the time a particulat set of user logs in.
I am only able to get InfoAlarm messages sent to via email notifications.My switch is sending logs to Cisco Works.Example:
13. 10.10.0.1 10.10.0.1 Apr 04 2008 10:34:41 EC 5 UNBUNDLE Interface GigabitEthernet1/4 left the port-channel Port-channel2 *
14. 10.10.0.1 10.10.0.1 Apr 04 2008 10:34:41 EC 5 BUNDLE Interface GigabitEthernet1/4 joined port-channel Port-channel2
But I only recieve infoalarm messages:
ALERT ID = 00000UE
TIME = Fri 04-Apr-2008 11:04:00 PST
STATUS = Active
SEVERITY = Informational
MANAGED OBJECT = 10.10.0.1
MANAGED OBJECT TYPE = Switches and Hubs
EVENT DESCRIPTION = 10.10.0.1: Cisco Configuration Management Trap:InformAlarm; 10.10.0.1: Authentication Failure:MinorAlarm;
My switch is setup as:
logging source-interface Loopback0
logging 10.10.100.111
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps syslog
I do not recieve critical or warning syslog messages.
I have a simple query for the issues I m facing currently.I have @ remote site remote site PIX firewall which is configurd to get the Snmp poll on the server locate outside via site to site VPN.There is another snmp server located also in inside which I’m not managing it .
========================================================================
below are the command for the snmp configured on PIX.
snmp-server host inside x.x.x.x community XXXXX ---This is not managed by us
snmp-server host inside x.x.x.x community XXXXX
snmp-server host outside y.y.y.y (private IP tunneled though VPN) poll community YYYYY ---Managed by us
snmp-server host outside y.y.y.y poll community YYYYY
[code]....
there are 2 snmp community & server defined in snmp-server host command for 2 different IP address belongs to snmp server and we can only define one global snmp-server community for any one of them .Question is how the snmp community take a precedence currently I am able to ping from my snmp server from outside to the PIX firewall outside interface over L2L VPN but somehow the snmp server is not listening when i do port query on 161 por!.
Seems like something simple, but can't find on Cisco.com. What are the max SNMP hosts allowed on an ASA 8.2 code? That would be Polls and Traps?
View 1 Replies View Relatedrequesting information via SNMP from my two stacked C3750X, running IOS 12.2(55)RE5. The stack is up and running and everything is just fine. There are three PowerSupplies installed with a PowerStack, also running like expectet.My problem ist to get the status-information about the chassis-fans. I couldn't find any information about the OID and the search results only in some non-useful information about the MIBs from Cisco which delivers only three information about installed fans (and fan-containers), so I guess these are the information about the fans included within the powersupply?! The chassis-fans are installed and the LEDs are green for all four fan-mounts, up and running.
View 4 Replies View RelatedI am looking for the SNMP OID to monitor the sh ip nat translations on a cisco 881.
#sh ver
Cisco IOS Software, C880 Software (C880DATA-UNIVERSALK9-M), Version 12.4(24)T, RELEASE SOFTWARE (fc1)
Technical Support: [URL]
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Thu 26-Feb-09 06:01 by prod_rel_team
[code]....
I have the RV 120W router, and can not seem to get SNMP Set to work. I though I would just check here, and make sure it is supported, and if it is, are there any special config settings I need to use?
View 2 Replies View RelatedSetting up SNMP on my Cisco AP's (1242AG Lightweight). How do I manage these via SNMP? It doesn't appear there is any settings within each AP for SNMP but only on the 4400 controller. What I am trying to do is setup Solarwinds Alerts, so when an AP goes down, I get notified of it. How or where this gets setup on the 4400 or the AP. I'm guessing there is something probably on the 4400 that I setup.
View 3 Replies View RelatedDoes 8.4(2) support snmp v3?
View 1 Replies View RelatedA customer observes SNMP timeout problems on a Cat6500 with IOS 12.2(33)SXI. As a result every 2 days (more or less) all interfaces are marked DOWN and a couple of minutes later all interface are up again - but in fact there is no interruption, it is just the snmp request getting a time out. the customer does not have problems with IOS 12.2(18)SXF14.
In the Bug Details the "Known affected versions" lists the following beside others:
12.2(33)SXI
12.2(33)SXI1
12.2(33)SXI2
[code]...
Now I am confused; both IOS versions are listed as affected (12.2(33)SXI and 12.2(18)SXF14) but the customer does have problems only with one version. Is the customer hitting this bug or is it another one ?
He upgraded 2 Cat65xx on which he observed the problem to IOS 12.2(33)SXI6 and the problem is gone; is this just a coincidence or is CSCed52841 really fixed in 12.2(33)SXI6. This version is not listed as affected but on the other hand, "Fixed-In" lists only these 3:
12.1(22.3)E1
12.2(17d)SXB5
12.2(18)SXD
Before going to upgrade around 50 Core / Distribution switches the customer wants to be sure with the IOS version. Tracing the issue is not that easy because the failure occurs only from time to time.
I've another problem with our new LMS 4.0.1.We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem. The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
I am getting these unwanted entries on my syslog server.03/10/2012 12:57:48 172.21.113.20 Error 23898: Interface FastEthernet0/1, changed state to downI tried to stop them with no snmp trap link-status but it hasn;t worked.[CODE]
View 4 Replies View RelatedI'm familiar with snmp-server views and excluding certain mib's, but is it possible to permit an snmp host to poll just one interface and nothing else on the router?
View 2 Replies View RelatedWe currently have a few 5505s installed at client sites which are connected via s2s ipsec VPN to our datacenter's 5510. We are using Nagios to monitor the local data center and remote client infrastructure (over the VPNs) which has been working well.
We would like to also monitor the remote 5505s using SNMP over the s2s tunnels but it doesn't seem to be working, the connection is timing out. We've configured the remote 5505s with the same snmp statement we used on the 5510 (snmp-server host inside <remote datacenter IP> poll community ***** version 2c) yet the Nagios SNMP check cannot connect to the remote 5505s. We've also tried the command using 'outside' without any luck, not sure how to get SNMP to route over the VPN.
I am trying to poll the 5 minute average CPU utilization of my Cisco Aironet 1252 (IOS version 12.4(25d)JA) using SNMP OID .1.3.6.1.4.1.9.2.1.58.0.However for some reason I am not getting any response back from the aironet. Note I am able to retrive the memory utilization without a problem.
View 1 Replies View RelatedI need to configure SNMP on our company Aironet 1130. I am told there is a tool we can use that will allow us do the configuration from a PC vs connecting directly to the device.. If that is true, where can I download it?
View 5 Replies View RelatedI need to configure cisco router 2921 for snmp v3,
View 5 Replies View RelatedI'm using ACS 4.2 and was just wondering if it's possible to add user accounts to it by using snmpset? If so, any documentation on what needs to be done? I have the SNMP running on it and get information from the ACS using snmpget.
View 2 Replies View RelatedI get the following error:
Router#config t
Router(config)#snmp-server view rttmon ciscoRttMonMIB included
%Bad OID
The same command is accepted on a Cisco 2900 router
Router#show version
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M4, RELEASE SOFTWARE (fc1)
[Code]......
How to get tcam utilization by using snmp on ASR100x?
View 2 Replies View RelatedI have a client with a 2112 WLC and 1252AG radios. The clients work fine, but an SNMP management server can not reach any of the clients over the wireless. Before the WLC and new AP's were installed, they were running older Cisco Autonomous AP's and had no problems with SNMP. My monitoring system uses SNMP and it can reach the WLC just fine, so there doesnt appear to be any issues on the switched network. What can be blocking the SNMP on the WLC?
View 4 Replies View Relatedhow to configure SNMP on the Cisco SG300 switches? I have the SG300-10P. I am not fully familiar with the new command line interface on this device, it was easy on the IOS but finding it a nightmare on this one.
I put the following command in but it didnt work.
snmp-server view Interfaces interfaces included
snmp-server community ACB123 ro 10.x.x.x view default
I tried to follow the guidelines on the cisco website but thats all Web interface based, i can only access the switch remotely via CLI.
Does the pix-501 support multiple SNMP communities? Im trying to add a second one, but the original community string gets removed when I add the new one. If we can have multiple SNMP hosts, then I woud imagine you could have multiple strings. I thought it was like most switches and routers, which can have the following:
snmp-server community STRING1
snmp-server community STRING2
The Pix-501 is currently running on version 6.3(5).
Monitoring H.323? I've got a 3925 running15.1(3)T with 9 PRI's. Because of our volume, syslogging is not the desired solution. We want something that we can potentially graph over an 8 hour period, so while the RTMT is accurate, either it won't store the data for 8 hours, or we aren't using it correctly (plus, mgmt may want access to the stats/graphs, and we're not keen on granting them access). So far, we've used: [code] None of these seem to accurately portray utilization. cdsp Active Channels seems to get the closest, so perhaps I have to tweak it a little bit, but so far, nothing accurate.
View 3 Replies View Related