SNMP traps enabled

[Khundmir4cisco]

Our Devices including acc, dist and core has almost all snmp traps enabled. My concern is if enabling all traps will have affect on network performance. Shall I only enable the traps that we need or shall I keep all traps enabled. What is the best practice from Cisco. What are the most important traps that are needed to be enabled. 

[Moaz.Elzhrawey]

Hi,

This is a good question, and to have it addressed in a proper way, I would say,

1- Enabling too much traps (even all traps) on the system/switch wouldn't affect the device performance, since all of these traps (many of them not triggered) as the parent feature is not enabled, aka enabling traps for EIGRP and your device has no EIGRP process running.

2- it's recommended to have all logging/traps/netflow to operate on the OOB (Out-Of-Band) management network, which in all/most of new devices are equipped with a dedicated OOB port which goes to a fully separate network.

3- From Security best-practices, don't activate non-used traps unless you're using them, and there is an NMS listening or polling them.

*** Please rate this as "Answer" if it solved your problem.***