topic Re: SNMP Server and Syslog in Network Security

SNMP Server and Syslog

wilson_1234_2 — Fri, 21 Feb 2020 09:30:53 GMT

We have all of our network equipment configured SNMP and syslog.

There is also Ciscoworks configured.

Is Cisco works considered the SNMP server?

If so, is this also where all of the traps age going?

There are a ton of traps configured and I don't see how they are all viable in Ciscoworks.

Ther are even more than this, but here is a sample:

snmp-server enable traps syslog

snmp-server enable traps flex-links status

snmp-server enable traps sonet

snmp-server enable traps dial

snmp-server enable traps fru-ctrl

snmp-server enable traps entity

snmp-server enable traps rsvp

snmp-server enable traps csg agent quota database

snmp-server enable traps srp

snmp-server enable traps vtp

snmp-server enable traps vlancreate

snmp-server enable traps vlandelete

snmp-server enable traps flash insertion removal

snmp-server enable traps c6kxbar intbus-crcexcd intbus-crcrcvrd swbus

snmp-server enable traps envmon fan shutdown supply temperature status

snmp-server enable traps port-security

snmp-server enable traps mpls traffic-eng

snmp-server enable traps mpls ldp

snmp-server enable traps isakmp policy add

snmp-server enable traps isakmp policy delete

snmp-server enable traps isakmp tunnel start

snmp-server enable traps isakmp tunnel stop

snmp-server enable traps ipsec cryptomap add

snmp-server enable traps ipsec cryptomap delete

snmp-server enable traps ipsec cryptomap attach

snmp-server enable traps ipsec cryptomap detach

snmp-server enable traps ipsec tunnel start

snmp-server enable traps ipsec tunnel stop

snmp-server enable traps ipsec too-many-sas

snmp-server enable traps alarms

snmp-server enable traps vlan-mac-limit

snmp-server enable traps voice poor-qov

snmp-server enable traps mpls vpn

Re: SNMP Server and Syslog

jreekers — Thu, 10 May 2007 18:35:23 GMT

Hi.

The snmp server is configured on your devices by the "snmp-server host xxx.xxx.xxx" command. Look for that, and it will indicate where the traps are being sent.

As far as the Ciscoworks server goes, DFM is one of the modules within LMS that has snmp trap handling functionality as a part of it. I'm not sure what version of LMS you're running, but here's some documentation that speaks to the functionality of DFM:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/dfm/dfm206/ug/intro.htm

I hope this helps.

-Joe

Re: SNMP Server and Syslog

wilson_1234_2 — Thu, 10 May 2007 19:39:20 GMT

If we add a device to the network,can we just point it to the SNMP host?

Does the host have to be specifically set up to allow traps from the new device, or does it catch everything sent to it?

Re: SNMP Server and Syslog

jreekers — Thu, 10 May 2007 19:51:23 GMT

If you're talking about the Ciscoworks server....

When you add the device to the network, two things can happen...

1. If Ciscoworks is configured to discover the network through the CM application, the new device will be automatically discovered.

2. The device will can be manually added into Ciscoworks via the RME application, and then syncronized to DFM.

You still should point the traps to the LMS server through the config on the device (as mentioned earlier).

Now if you're not talking about Ciscoworks, but some generic NMS, you will definitely have to have a trap receiver on the server, and still on the device have the "snmp-server host" command set to point the traps there.

Hope this helps,

-Joe