topic Re: snmp configuration in Network Security

snmp configuration

elite2010 — Fri, 21 Feb 2020 17:04:01 GMT

Hi,

I am trying to configure snmp for asa .

my snmp server ip is 10.0.0.1 ,

In syslog i am getting the following message "refused connect from 10.0.0.1"

ASA(config)# snmp-server enable
ASA(config)# snmp-server host inside 10.0.0.1 community somesecretword
ASA(config)# snmp-server community somesecretword
ASA(config)# snmp-server enable traps snmp authentication linkup linkdown coldstart

inside intereface there is no policy , I can reach the the server from the asa .

Please help

Re: snmp configuration

GRANT3779 — Tue, 23 Apr 2019 14:33:50 GMT

What version of SNMP are you using on the ASA as it didn't seem to be manually configured looking above. 2c potentially by default. Does it match on 10.0.0.1?
You can check ASA using

show snmp-server host

Re: snmp configuration

elite2010 — Wed, 24 Apr 2019 05:49:07 GMT

Hi,

the output shows

host ip = 10.0.0.1, interface = inside trap community ***** version 2c

Thanks

Re: snmp configuration

GRANT3779 — Wed, 24 Apr 2019 11:26:10 GMT

Hi,

I'm not sure if you only have traps enabled looking at that output. Are you looking to poll from your SNMP Server?

I would try removing the following initially for testing -

snmp-server enable traps snmp authentication linkup linkdown coldstart

Keep the rest of the config you have.

What are you using for your SNMP server, I assume it is configured with appropriate version and passwords etc.. I would assume so.