topic Re: SNMP traps not being send from ISE nodes in Network Access Control

SNMP traps not being send from ISE nodes

alinbaby — Fri, 19 Mar 2021 16:31:10 GMT

Hi All,

I have added the snmp server as host in ise but snmp traps are not getting initiated from the ise nodes in deployment. Any idea on this ? And is there someway we can manually initiate traps from ise side.

Regards,

Alin

Re: SNMP traps not being send from ISE nodes

balaji.bandi — Fri, 19 Mar 2021 17:43:38 GMT

Hope you are looking SNMP Trap from ISE to SNMP Server Host :

check below example Guide : ( hope there is no Firewall between these device ? )

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215521-configure-and-understand-snmp-traps-to-m.html

Re: SNMP traps not being send from ISE nodes

alinbaby — Fri, 19 Mar 2021 17:49:45 GMT

We have done the configurations in ISE as mentioned in the link. But still traps are not getting initiated.

Re: SNMP traps not being send from ISE nodes

Marcelo Morais — Fri, 19 Mar 2021 18:15:26 GMT

Hi @alinbaby ,

please double check if your SNMP Server is enabled:

ise/admin# show ports | inc 161
udp: 0.0.0.0:161

To manually initiate traps, remember that:

"...Cisco ISE sends the following generic system traps if you configure the SNMP Host from the CLI:

Cold start: When the device reboots.

Linkup: When Ethernet interface is up.

Linkdown: When Ethernet interface is down.

Authentication failure: When the community strings do not match..."

Hope this helps !!!

Re: SNMP traps not being send from ISE nodes

balaji.bandi — Sun, 21 Mar 2021 21:35:53 GMT

what kind of traps you looking to send.

some guidelines to troubleshoot :

https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_011000.html#id_17078

Re: SNMP traps not being send from ISE nodes

alinbaby — Sat, 27 Mar 2021 09:00:08 GMT

Hi,

I am specifically looking for the traps which are generated when the application server stops running. But no traps are getting generated for any events.

Re: SNMP traps not being send from ISE nodes

alinbaby — Sat, 27 Mar 2021 09:05:02 GMT

Yes. SNMP server is enabled and i have configured SNMP hosts in CLI. But i am not receiving any traps for the above events you have mentioned. Are the traps generated on a periodic basis or only when some events are triggered ? And will the below trap be generated when app server stops running ?

"HOSTRESOURCES- MIB::hrSWRunName = STRING: "app-server:Not Running""

Re: SNMP traps not being send from ISE nodes

Marcelo Morais — Sat, 27 Mar 2021 10:49:10 GMT

Hi,

application stop ise will not trigger any trap because that also stops monitoring and traps are generated when events are triggered.

What is your ISE version?

Regards

Re: SNMP traps not being send from ISE nodes

alinbaby — Sat, 27 Mar 2021 18:22:26 GMT

We are running on 2.2 patch 15. And we are planning it to upgrade to 2.7. So i would like to know about possibility on both versions.