Enabling Snmp - Cisco Catalyst 6500 Series Configuration Manual

Chapter 17 Monitoring and Troubleshooting the Firewall Services Module

Enabling SNMP

The SNMP agent that runs on the FWSM performs two functions:
•
•
To enable the SNMP agent and identify an NMS that can connect to the FWSM, follow these steps:
To identify the IP address of the NMS that can connect to the FWSM, enter the following command:
Step 1
FWSM/contexta(config)# snmp-server host interface_name ip_address [trap | poll]
[udp-port port ]
Specify trap or poll if you want to limit the NMS to receiving traps only or browsing (polling) only. By
default, the NMS can use both functions.
SNMP traps are sent on UDP port 162 by default. You can change the port number using the udp-port
keyword.
To specify the community string, enter the following command:
Step 2
FWSM/contexta(config)# snmp-server community key
The SNMP community string is a shared secret between the FWSM and the NMS. The key is a
case-sensitive value up to 32 characters in length. Spaces are not permitted. The default is public.
(Optional) To set the SNMP server location or contact information, enter the following command:
Step 3
FWSM/contexta(config)# snmp-server {contact | location} text
To enable the FWSM to send traps to the NMS, enter the following command:
Step 4
FWSM/contexta(config)# snmp-server enable traps [all | syslog | firewall | snmp [ trap1 ]
[ trap2 ] [...]]
By default, SNMP core traps are enabled (snmp). If you do not enter a trap type in the command, syslog
is the default. To enable or disable all traps, enter the all option. For snmp, you can identify each trap
type separately. See
To enable system messages to be sent as traps to the NMS, enter the following command:
Step 5
FWSM/contexta(config)# logging history level
You must also enable syslog traps using the snmp-server enable traps command above.
To enable logging, so system messages are generated and can then be sent to an NMS, enter the following
Step 6
command:
FWSM/contexta(config)# logging on
The following example sets the FWSM to receive requests from host 192.168.3.2 on the inside interface,
but the FWSM does not send SNMP traps.
FWSM/contexta(config)# snmp-server host 192.168.3.2
FWSM/contexta(config)# snmp-server location building 42
FWSM/contexta(config)# snmp-server contact kim lee
FWSM/contexta(config)# snmp-server community ohwhatakeyisthee
OL-6392-01
Replies to SNMP requests from NMSs.
Sends traps (event notifications) to NMSs.
Table 17-1 on page 17-2
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
Monitoring the Firewall Services Module
for a list of traps.
17-3