Hello all !
Thanks for your answers 😉
I take note of the important tip "snmp-server ifindex persist" to add on the switch and router !!
I also use an access-list to only authorize my OBSERVIUM server. The access-list is directly on the snmp-server user and not on the snmp-server group.
I think it must come to the same ! (?)
snmp-server group READONLY v3 priv read MIB-2
snmp-server view MIB-2 iso included
snmp-server user MY-USER READONLY v3 auth sha XXX priv aes 128 ZZZ access IP-OBSERVIUM
!
ip access-list standard IP-OBSERVIUM
permit A.B.C.D
deny any
!
Actually my question is more about the "snmp-server enable traps XXXXX"
variant compared to "snmp-server view MIB-2 iso included"
I can't find a clear answer on both modes and also which one to integrate with Observium.
De : observium <observium-bounces@observium.org> de la part de Michael via observium <observium@observium.org>
Envoyé : samedi 20 novembre 2021 03:43
À : Observium <observium@observium.org>
Cc : Michael <obslist@smarsz.com>
Objet : Re: [Observium] Re : Best SNMP configuration for CISCO switch and router
I recommend also using the ifindex persistence to prevent OID interface indexes changing after a reload.
snmp-server ifindex persist
There
used to be an example configuration in our documentation but it seems to not be there anymore.
Configuration is quite straightforward, just define a read only community and attach it to an access list only allowing your management station to reach it.
Jacek’s example is snmpv3, but you can use v2c too, it’s a little simpler.
Adam.
Sent from my iPhone
Someone is using 😊
I use it like this:
snmp-server group Observium v3 priv read SNMPv3PL access acl-monitoring
snmp-server view SNMPv3PL iso included
snmp-server user SNMP-USR_PL-RO Observium v3 auth sha BlaBlaBla priv aes 128 Blablabla2
ip access-list standard acl-monitoring
permit x.x.x.x (obs serv)
deny any log
Jacek Dąbrowski
From: observium <
observium-bounces@observium.org>
On Behalf Of Sébastien
65 via observium
Sent: Friday, November 19, 2021 8:24 PM
To: observium@observium.org
Cc: Sébastien 65 <sebastien-65@live.fr>
Subject: [Observium] Re : Best SNMP configuration for CISCO switch and router
Nobody uses SNMP on CISCO ??
Objet : Best SNMP configuration for CISCO switch and router
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2
snmp-server view MIB-2 iso included
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________observium mailing listobservium@observium.orghttp://postman.memetic.org/cgi-bin/mailman/listinfo/observium