Cisco IOS SNMP Configuration
referenced from:http://www.observium.org/wiki/Cisco_IOS_SNMP_Configuration
The templates below will help you securely configure SNMP on your Cisco IOS (and IOS-XE) devices.
Text inside the <> brackets should be replaced to match your network.
Cisco SG300 Small Business 300
snmp-server server #enables SNMP management
snmp enable traps
snmp-server community <community> RO
snmp-server community <community> RW
snmp-server location <location>
snmp-server contact <contact>
IPv4 & IPv6 Named ACL
If you use both IPv4 and IPv6 and your host supports IPv4 and IPv6 named access lists for SNMP communities.
ip access-list standard SNMPv4 permit <Observium IPv4 address> ipv6 access-list SNMPv6 permit ipv6 <Observium IPv6 address> any snmp-server community <community> RO ipv6 SNMPv6 SNMPv4 snmp-server ifindex persist snmp-server location <location> snmp-server contact <lontact>
IPv4 Only Named ACL
If you only use IPv4 and your host supports IPv4 named access lists for SNMP communities.
ip access-list standard SNMPv4 permit <Observium IPv4 address> snmp-server community <community> RO SNMPv4 snmp-server ifindex persist snmp-server location <location> snmp-server contact <lontact>
IPv4 Numbered ACL
If your host only supports numbered IPv4 access lists for SNMP communities. This is needed for older software and some low end switches.
access-list 1 permit <Observium IP> snmp-server community <community> RO 1 snmp-server ifindex persist snmp-server location <cocation> snmp-server contact <contact>
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.