SNMP configuration change

[lacv2k]

Dear Experts,

I recently setup two 3850 switches for different netwoks. In the configuration I setup SNMP for monitoring traffic throught specific interfaces.

After many day of normal operation, my client, the owner of the switch and the network, call me because they cant monitor the traffic anymore.

Becasue they have credentials to access the switches, I suspect they have change accidentally the SNMP configuration of the switch. So I wonder if these changes can be saved in a log file and how can I check it. Also I´d like to know how can I find out what is the real cause of these changes.

Because I have experimented a similar problem in a second switch, I would like to know if it is a problem of the switch and how can I detect it.

Thank you for your help,

Best regards,

Luis A. Cristóbal V.

[Seb Rupik · Accepted solution]

Hi there,

You should take a look at the config log archive feature. This will track every configuration change that has been applied. You can also have it notify your syslog server (if you have one configured) each time the config is changed.

!
archive
  log config
    logging enable
    hidekeys
    notify syslog
!

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/config-mgmt/configuration/xe-3s/config-mgmt-xe-3s-book/cm-config-logger.html

cheers,

Seb.