topic Re: SNMP issue with Cisco ASA site to site IKEv2 IPsec VPN in Network Security

SNMP issue with Cisco ASA site to site IKEv2 IPsec VPN

ndahemmy — Mon, 06 Nov 2023 16:00:34 GMT

Hello @

I want to integrate ASA5506-X in Cisco Prime but it looks SNMP doesn't work. though the configured community is correct.

The setup is Site-to-Site IKEv2 IPsec VPN.The ASA Software Version 9.16(4). I want to manage it via the routed inside interface/ or BVI. The ping is fine but when i try to integrate it Prime it doesn't work with "Check whether the SNMP read community credentials are Valid". the credentials are corrent.

I would like to know if anyone faced this challenge and how he/she solved it

Or if any know bug

Thank you

Re: SNMP issue with Cisco ASA site to site IKEv2 IPsec VPN

Rob Ingram — Mon, 06 Nov 2023 16:07:06 GMT

@ndahemmy From ASA 9.14 for secure SNMP polling over a site-to-site VPN, include the IP address of the outside interface in the crypto map access-list as part of the VPN configuration and monitor via the outside interface IP address.

Re: SNMP issue with Cisco ASA site to site IKEv2 IPsec VPN

ndahemmy — Mon, 06 Nov 2023 16:48:55 GMT

Thank you @Rob Ingram ,

Do you mind to share Cisco reference or release note

Thank you

Re: SNMP issue with Cisco ASA site to site IKEv2 IPsec VPN

Rob Ingram — Mon, 06 Nov 2023 17:01:36 GMT

@ndahemmy https://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asa_new_features.html