Firepower 1010 SNMP Issue

[MP13]

Hi,

I recently upgraded a Firepower 1010 from v6.X to v7.X and with that the SNMP configuration I formerly did in flex config was warning as invalid. I've done the configuration via the API numerous times and never had any issues however most of the time it's been on devices already running v7.

After removing the flex-config object and running the API commands I can see the snmp-server object in the config from the diagnostic-cli however it's then followed by "no snmp-server enable" and of course now my SNMP no longer connects.

I've had a look through the API but couldn't see any way to toggle this to enabled. I assume it's set to no enable because that's what the former flex-config object had. 

Has anyone else experienced this?

[balaji.bandi]

cehck the bug and suggestions :

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwd38583

[MP13]

Thank you. Unfortunately snmp-serv is in the block list as well so this doesn't work for me.

[balaji.bandi]

if that solved then look below document to re-configure.

https://community.cisco.com/t5/security-knowledge-base/how-to-enable-snmp-on-firepower-using-fdm/ta-p/4048084

[MP13]

It didn't solve it as snmp-serv is not available. It's in the block list for flex-config. I know how to re-configure as I've done it many times before, the bit I haven't done is move from a flex config object to the new API configured way. I think the problem is I have a remnant of the flex-config object in my config now which is the "no snmp-server enable"

[MHM Cisco World]

You use FDM or FMC ?

MHM

[MP13]

FDM

[MP13 · Accepted solution]

This was fixed in the end by doing a full deployment of the configuration rather than just an incremental.