Nexus SNMP

[mayambanzumba]

Hi

On standard Cisco hardware I can send a trap using "snmp-server enable trap config" and it sends a number of traps with different entries status's and I am using CISCO-CONFIG-MAN-MIB:ccmHistoryEventConfigDestination is equal to 4 (being a change to start up config), but for Nexus when I use the same SNMP command the only trap it sends is a CISCO-CONFIG-MAN-MIB:ciscoConfigManMIBNotifications.2 which appears to be everytime a command is submitted. There only seems to be one option for snmp config traps "snmp-server enable traps config ccmCLIRunningConfigChanged" even though the syntax says "CLI Running/Startup config change trap", but it only picks up when the running config changes.

The aim of this is because I need to be able to capture a copy of the config everytime the start-up config is changed for realtime detection of changes as part of PCI audits. I have got this working fine for everyone of my Cisco devices bar the Nexus.  The device is a Nexus 5K.

Thanks

Mayamba

[ngoldwat]

Hi, 

Are you saying that ccmCLIRunningConfigChanged is not triggered upon exit from config mode on a Nexus 5K?  What version are you running?

.1.3.6.1.4.1.9.9.43.2.0.2

ccmCLIRunningConfigChanged OBJECT-TYPE

    -- FROM    CISCO-CONFIG-MAN-MIB

    TRAP

    VARBINDS    { ccmHistoryRunningLastChanged, ccmHistoryEventTerminalType }

    DESCRIPTION    "This notification indicates that the running

            configuration of the managed system has changed

            from the CLI.

            If the managed system supports a separate

            configuration mode(where the configuration commands

            are entered under a  configuration session which

            affects the running configuration of the system),

            then this notification is sent when the configuration

            mode is exited.

            During this configuration session there can be

            one or more running configuration changes."

Does the following return a value?

.1.3.6.1.4.1.9.9.43.1.3.1

ccmCLICfgRunConfNotifEnable OBJECT-TYPE

    -- FROM    CISCO-CONFIG-MAN-MIB

    -- TEXTUAL CONVENTION TruthValue

    SYNTAX        Integer { true(1), false(2) }

    MAX-ACCESS    read-write

    STATUS        Current

    DESCRIPTION    "This variable indicates whether the system produces

            the ccmCLIRunningConfigChanged notification. A false

            value will prevent notifications from being generated

            by this system."