cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
9461
Views
5
Helpful
6
Replies

snmp not working in asa

kp-tkr2014
Level 1
Level 1

Hi,

I was trying to add ASA to prtg for snmp monitoring .


Could not create the sensor SNMP Traffic on device Device ().


Sensor does not get response from device. SNMP credentials are wrong or device does not support the required uptime OID (1.3.6.1.2.1.1.3.0) for traffic sensors. This OID is mandatory by the SNMP RFC. Check SNMP access rights or contact device vendor. (code: PE244)

sh snmp-server oidlist

-------------------------------------------------
[0] 1.3.6.1.2.1.1.1. sysDescr
[1] 1.3.6.1.2.1.1.2. sysObjectID
[2] 1.3.6.1.2.1.1.3. sysUpTime
[3] 1.3.6.1.2.1.1.4. sysContact
[4] 1.3.6.1.2.1.1.5. sysName
[5] 1.3.6.1.2.1.1.6. sysLocation

Please any help 

6 Replies 6

Philip D'Ath
VIP Alumni
VIP Alumni

It definitely works.  Make sure you have something like:

snmp-server host inside <prtg IP address> community public version 2c

Hi,

Thanks for the reply


snmp-server host Inside 192.168.7.10 trap community ***** version 2c
no snmp-server location
no snmp-server contact
snmp-server enable traps syslog
snmp-server enable traps cpu threshold rising

communtiy string is correct

Now the error is different
No response (check: firewalls, routing, snmp settings of device, IPs, SNMP version, community, passwords etc) (SNMP error # -2003)

Hi,

You need to set the SNMP server for SNMP polling. In your configuration only mentions SNMP traps.

An example configuration would be

  • snmp-server host inside 192.168.7.10 community ***** version 2c

Your ASA will send out SNMP traps but will not respond to SNMP Polls.

Hi,

Thank you 

which one is the correct one .

  • snmp-server host inside 192.168.7.10 community ***** version 2c
  • snmp-server host Inside 192.168.7.10 poll community ***** version 2c

Do i need to add the below command also ?

snmp-server host Inside 192.168.7.10 trap community ***** version 2c

Thanks

You need the exact answer I gave 2 months ago.  It is still the correct answer.  You only need:

snmp-server host inside <prtg IP address> community public version 2c

Hi

  • snmp-server host inside 192.168.7.10 community ***** version 2c
    • This will allow all SNMP functions (poll and trap) for the IP address 192.168.7.10

  • snmp-server host Inside 192.168.7.10 poll community ***** version 2c
    • This will allow host 192.168.7.10 to snmp poll the device - It will not send SNMP traps
  • snmp-server host Inside 192.168.7.10 trap community ***** version 2c
    • This will send SNMP traps to host 192.168.7.10 - It will not allow snmp polling of the device.

PRTG allow both SNMP polling and the receipt of SNMP traps. the first command is best.

Review Cisco Networking for a $25 gift card