Configuring SNMP Settings

You can configure SNMP settings for the CMP system and all Policy Management servers in the topology network. You can configure the Policy Management network such that the CMP system collects and forwards all traps or such that each server generates and delivers its own traps.

Note:

SNMP settings configuration must be done on the active CMP server in the primary cluster. A warning displays if the login is not on the active primary CMP system.

To configure SNMP settings:

1. Log in to the CMP system using a username with administrator privileges.
2. From the Platform Setting section of the navigation pane, select SNMP Setting.
   The SNMP Settings page opens.
3. Click Modify.
   The Edit SNMP Settings page opens.
4. For each SNMP Manager, enter a valid hostname or an IPv4IPv4/IPv6 address.
   The Hostname/IP Address field is required for an SNMP Manager to receive traps and send SNMP requests.

   The field has the following restrictions:

   • A hostname should include only alphanumeric characters.
   • Maximum length is 20 characters.
   • Case insensitive (uppercase and lowercase are treated as the same). By default, these fields are blank.

     Note:

     Note: The IPv6 address is not supported.
5. (Optional) You can configure a port for each SNMP Manager by entering a port value between 1 and 65535 in the Port field. If left blank, the default value is 162.
6. From the Enabled Versions list, select one of the following versions:
   • SNMPv2c
   • SNMPv3
   • SNMPv2c and SNMPv3 (default)
7. If you selected SNMPv2c or SNMPv2c and SNMPv3 from the Enabled Versions list, configure the following:
   1. Traps EnabledTraps Enabled
      Specifies whether sending SNMPv2 traps is enabled. The default is enabled.

      Note:

      To use the SNMP Trap Forwarding feature, enable this option.
   2. Traps from individual Servers
      Specifies whether sending SNMPv2 traps from individual servers is enabled. If disabled, SNMPv2 traps are only sent from the active CMP system only. The default is disabled.

      Note:

      Note: To use the SNMP Trap Forwarding feature, disable this option.
   3. SNMPv2c Community Name

      Enter the SNMP read-write community string.

      This field has the following restrictions:

      • The field is required if SNMPv2c is enabled.
      • The name can contain alphanumeric characters and cannot exceed 31 characters in length.
      • The name cannot be either private or public.

        The default value is snmppublic.

8. If you have selected SNMPv3 or SNMPv2c, and SNMPv3 from the Enabled Versions list, configure the following:
   1. SNMPv3 Engine ID — Enter an Engine ID for SNMPv3. The Engine ID can be 10 to 64 digits long and must use only hexadecimal digits (0 to 9 and a to f). The default is no value (null).
   2. SNMPv3 Security Level — Select the level of SNMPv3 authentication and privacy from the list:
      • No Auth No Priv — Authenticate using the Username. No Privacy.
      • Auth No Priv — Authenticate using MD5 or SHA1 protocol.
      • Auth Priv (default) — Authenticate using MD5 or SHA1 protocol. Encrypt using the AES or DES protocol.
   3. SNMPv3 Authentication Type — Select an SNMPv3 authentication protocol from the list:
      • SHA-1 — Use Secure Hash Algorithm authentication.
      • MD5 (default) — Use Message Digest authentication.
   4. SNMPv3 Privacy Type — Select an SNMPv3 privacy protocol from the list:
      • AES (default) — Use Advanced Encryption Standard privacy.
      • DES — Use Data Encryption Standard privacy.
   5. SNMPv3 Username — Enter a username. The username can contain 0 to 32 characters and must only contain alphanumeric characters.

      The default is TekSNMPUser.

   6. SNMPv3 Password — Enter an authentication password. The password must contain between 8 and 64 characters and can include any character. The default is snmpv3password.

      Note:

      The SNMPv3 password is also used for msgPrivacyParameters.
9. Select Traps Enabled to enable sending SNMPv2 traps. The default is enabled. Uncheck the check box to disable sending SNMPv2 traps.

   Note:

   To use the SNMP Trap Forwarding feature, enable this option.
10. Select Traps from individual Servers to enable sending traps from each individual server. The default is disabled. Uncheck the checkbox to send traps from the active CMP system only.

    Note:

    To use the SNMP Trap Forwarding feature, disable this option.
11. Enter the SNMPv2c Community Name.

    This is the SNMP read-write community string. This field has the following restrictions:

    • The field is required if SNMPv2c is enabled.
    • The name can contain alphanumeric characters and cannot exceed 31 characters in length.
    • The name cannot be either private or public.

    The default value is snmppublic.

12. Enter the SNMPv3 Engine ID.

    This is the configured Engine ID for SNMPv3. This field has the following restrictions:

    • The field is required if SNMPv3 is enabled.
    • The Engine ID uses only hexadecimal digits (0 to 9 and a to f).
    • The length can be from 10 to 64 digits.

    The default value is no value (null).

13. Select the SNMPv3 Security Level (SNMPv3 Authentication and Privacy) from the list:
    • No Auth No Priv — Authenticate using the Username. No Privacy.
    • Auth No Priv — Authenticate using MD5 or SHA1 protocol.
    • Auth Priv — [default] Authenticate using MD5 or SHA1 protocol. Encrypt using the AES or DES protocol.
14. Select the SNMPv3 Authentication Type (Authentication protocol for SNMPv3) from the list:
    • SHA-1 — Use Secure Hash Algorithm authentication.
    • MD5 — [default] Use Message Digest authentication.
15. Select the SNMPv3 Privacy Type (Privacy Protocol for SNMPv3) from the list:
    • AES — [default] Use Advanced Encryption Standard privacy.
    • DES — Use Data Encryption Standard privacy.
16. Enter the SNMPv3 Username.
    This field has the following restrictions:

    • The field is required if SNMPv3 is enabled.
    • The name must contain alphanumeric characters and cannot exceed 32 characters in length.

    The default value is TekSNMPUser.

17. Enter the SNMPv3 Password. This value is the Authentication password for SNMPv3 and is also used for msgPrivacyParameters.
    This field has the following restrictions:

    • The field is required if SNMPv3 is enabled.
    • The length of the password must be between 8 and 64 characters and can include any character. The default value is snmpv3password.
18. Click Save.

The SNMP settings for the network are configured.