topic Re: SNMP config on ISE in Network Access Control

SNMP config on ISE

Srinivasan Nagarajan — Thu, 09 Sep 2021 06:50:40 GMT

Hi Experts,

We're running ISE V2.7 and would like to migrate V2C to V3. Below is the current configuration on the ISE.

Can you please suggest if only the traps are configured as per below or polling+traps are also configured.

Not able to infer. Please assist. Thanks in advance.

snmp-server enable
snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>
snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>
snmp-server community <STRING> ro
snmp-server engineID <ISE SERIAL NUMBER>

Re: SNMP config on ISE

Mohammed al Baqari — Thu, 09 Sep 2021 08:02:06 GMT

Hi,

The config has traps configured. Regarding polling, this is configured from
the NMS server. The community string is configured which is enough for
polling to be configured on NMS.

**** please remember to rate useful posts

Re: SNMP config on ISE

Srinivasan Nagarajan — Thu, 09 Sep 2021 09:48:13 GMT

Hi @Mohammed al Baqari

Thanks for the reply.

Our plan is to migrate to SNMP V3 from SNMP V2C for polling but the traps continues to work on 2C (Client requirement). Technically, is it possible and if yes, how the config would look like.

Can you please suggest

Re: SNMP config on ISE

balaji.bandi — Thu, 09 Sep 2021 09:58:17 GMT

You can use both v3 and v3 i guess here.

v3 config looks as below for NMS to poll ISE node.

snmp-server user SNMPv3USER v3 plain authpassword passwordhere

snmp-server host Y.Y.Y.Y  version 3 SNMPv3USER XXXXXXXXXXXXXXXXXXXXXX authpassword password her

hope this help you.

Re: SNMP config on ISE

Srinivasan Nagarajan — Thu, 09 Sep 2021 10:10:37 GMT

Hi Balaji,

Thanks for looking into this.

From the reply, assuming it's typo, I believe V2C for traps and V3 for polling would work and it'd look like below.

Please correct me if i'm wrong ?

Polling:

snmp-server user SNMPv3USER v3 plain authpassword privpassword

Traps:

snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>
snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>

snmp-server community <STRING> ro

Re: SNMP config on ISE

Mohammed al Baqari — Thu, 09 Sep 2021 10:16:06 GMT

Hi,

Yes, you are right. This will allow poll with v3 and traps with v2

**** please remember to rate useful posts

Re: SNMP config on ISE

balaji.bandi — Thu, 09 Sep 2021 10:28:44 GMT

yes you can combination - not seen any issue here, hope that helps you.