SNMP configuration in Ironport Cluster

[noraarellano]

Hi everyone, 

I have 2 Ironport appliances X series in a cluster configuration, I want to configurate SNMP in both appliances but if I run the command snmpconfig it only allows me to configure snmp for the cluster, in this way I only can "ask" for status to 1 interface  on behalf of the entire cluster and I dont know if a high cpu trap or high memory trap on the other appliance can be send to my snmp manager.

I tried to configure snmp in every machine (not cluster mode) but the appliance sends me an strange error and kick me out of the cli.

Anyone of you had configure snmp in a cluster environment? Can you guys tell me how can I do this?

Best Regards!

[Paul Cardelli]

The term cluster is a misnomer. It is more of a centralize configuration. Both appliances will send traps individually and will share the same configurations. Basically both appliances act on their own, and don't share IP addresses or failover (the beauty of email is failover is built into MX records and transport configurations). There are instances when it makes sense to have separate configurations for a group of systems in the "Configuration Cluster". For SNMP this can be done at the Cluster or "Cluster Group" Level.

In my example I wanted to have a different SNMP Location for two sets of appliances:

What I had to do for SNMP, was to configure a Cluster Group for each location. This way I could say Appliance A & B are at location 1, and Appliances C & D are at location 2.So in the CLI, you will need to create the groups, and then assign your appliances to each group. Then Change your cluster mode in the CLI to the appropriate group and make the SNMP changes. Repeat for your other group.

Please let me know if this was helpful, I would be happy to go into more details.

[noraarellano]

Hi Paul!

Thanks for your reply! I only have two appliances,  A and B,  Can I generate a group A and put the appliance A there and a group B and place the appliace B there? Or it is too much and I only have to make this in a machine level configuration?

Also I was thinking, If I delete the cluster configuration, make the snmp configuration now at machine level and then recreate the cluster? Do you think that the SNMP configuration in both appliance will remain or it will dissappear?

I'm kind of new with this cluster configuration

Best Regards!

[Paul Cardelli]

If you remove the cluster config, and recreate, your cluster config will only contain the configuration of the first device used to create the cluster. You would have to recreate the configurations for the second machine. 

I have not tested the Machine level configurations for SNMP. I believe it is possible in the CLI, as long as you set the proper cluster configuration mode to the right appliance. I'll take a look at my appliances in the morning if I have time.

I only learned of cluster configurations about a month ago, and figured out most of the issues and benefits. Overall I really like being able to manage filters and policies on just one appliance.

Also a good Cluster config command to try every so often is one to check the cluster config. I can't remember it off the top of my head, but it will make sure that your configuration is synced properly and warn and ask you about any differences. 

[noraarellano]

Hi Paul, thanks for your response.

I thought that... :/ that the configuration made before the cluster config will not remain. Thanks for clarifying me :)

I tried making this in a machine level but when I am introducing the snmp community the cli kicks me out and close the session.. I did not see the exception or the error showed, :/ Do you know if this is normal behavior?

Let me try to make the groups as you said first and let you know

Thanks for your help!

[Paul Cardelli]

I don't think it should kick you out when making the change in the CLI. Usually you will get some sort of feedback. I have not tried to make this change at the machine level yet in my cluster config.