The Difference in Configuring SNMP Traps in ACI through Fabric Policy

[djkim03]

Hello, I'm trying to understand the difference in configuring SNMP Traps in ACI through Fabric - Fabric Policy and Fabric - Access Policy. Does anyone know what distinguishes these two configurations? I still can't grasp the difference between them.

[AshSe]

Hello @djkim03 , here is my one cent knowledge: 

Configuring SNMP traps in Cisco ACI (Application Centric Infrastructure) can be done through two main policy areas: Fabric Policies and Access Policies. Understanding the distinction between these two can help you apply the correct configuration for your needs. Here’s a breakdown of the differences:

Fabric Policies

Fabric Policies are used to configure settings that apply to the entire ACI fabric. These policies are generally global and affect the overall behavior and management of the fabric. When you configure SNMP traps under Fabric Policies, you are setting up SNMP for the entire fabric, which includes all the nodes (spine and leaf switches) within the ACI fabric.

Key Points:

1. Scope: Global, affecting the entire fabric.
2. Use Case: When you want to apply SNMP settings uniformly across all nodes in the fabric.
3. Configuration Path: Typically found under Fabric > Fabric Policies > Policies > SNMP.

Access Policies

Access Policies, on the other hand, are more granular and are used to configure settings that apply to specific interfaces, nodes, or groups of nodes. These policies are often used to manage how endpoints (such as servers, virtual machines, etc.) connect to the ACI fabric. When you configure SNMP traps under Access Policies, you are setting up SNMP for specific interfaces or nodes, allowing for more targeted monitoring and management.

Key Points:

1. Scope: Granular, affecting specific interfaces or nodes.
2. Use Case: When you need to apply SNMP settings to specific parts of the fabric, such as particular leaf switches or interfaces.
3. Configuration Path: Typically found under Fabric > Access Policies > Policies > SNMP.

Practical Example

1. Fabric Policy Configuration: If you want to ensure that all devices in your ACI fabric send SNMP traps to a central SNMP manager, you would configure this under Fabric Policies. This ensures that every node in the fabric is uniformly configured to send SNMP traps.
2. Access Policy Configuration: If you have a specific set of leaf switches or interfaces that need to send SNMP traps to a different SNMP manager (perhaps for a specific application or tenant), you would configure this under Access Policies. This allows you to have different SNMP configurations for different parts of your network.

Summary

1. Fabric Policies: Use these for global configurations that apply to the entire ACI fabric.
2. Access Policies: Use these for more specific configurations that apply to particular nodes or interfaces within the fabric.

By understanding these distinctions, you can better decide where to configure your SNMP traps based on whether you need a global or a more targeted approach.

HTH

AshSe

Please rate this post if it was helpful; your feedback is appreciated!