Enabling Snmp - Cisco ASA Series Cli Configuration Manual

Configuring SNMP
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Configuring SNMP
This section describes how to configure SNMP and includes the following topics:
•
•
•
•
•
•

Enabling SNMP

The SNMP agent that runs on the ASA performs two functions:
•
Cisco ASA Series CLI Configuration Guide
1-18
The ENTITY-MIB is not available in the non-admin context. Use the IF-MIB instead to perform
queries in the non-admin context.
Does not support SNMP Version 3 for the AIP SSM or AIP SSC.
Does not support SNMP debugging.
Does not support retireval of ARP information.
Does not support SNMP SET commands.
When using NET-SNMP Version 5.4.2.1, only supports the encryption algorithm version of
AES128. Does not support the encryption algorithm versions of AES256 or AES192.
Changes to the existing configuration are rejected if the result places the SNMP feature in an
inconsistent state.
For SNMP Version 3, configuration must occur in the following order: group, user, host.
Before a group is deleted, you must ensure that all users associated with that group are deleted.
Before a user is deleted, you must ensure that no hosts are configured that are associated with that
username.
If users have been configured to belong to a particular group with a certain security model, and if
the security level of that group is changed, you must do the following in this sequence:
–
Remove the users from that group.
–
Change the group security level.
–
Add users that belong to the new group.
The creation of custom views to restrict user access to a subset of MIB objects is not supported.
All requests and traps are available in the default Read/Notify View only.
The connection-limit-reached trap is generated in the admin context. To generate this trap. you must
have at least one snmp-server host configured in the user context in which the connection limit has
been reached.
You cannot query for the chassis temperature for the ASA 5585 SSP-40 (NPE).
Enabling SNMP, page 1-18
Configuring SNMP Traps, page 1-20
Configuring a CPU Usage Threshold, page 1-21
Configuring a Physical Interface Threshold, page 1-21
Using SNMP Version 1 or 2c, page 1-22
Using SNMP Version 3, page 1-23
Replies to SNMP requests from NMSs.
Chapter 1 Configuring SNMP