We want an alert when a new mac address is added to an access port.

I did some more research and I got the switch to send a Mac-Notification-Change trap to the server.

Is there an easy way to implement this? I am testing with snmptrapd daemon.

I assume once the server receives the trap it can be re-routed to syslog-ng and brought into Observium.

Switch à Server (udp 162) àScript/Program that re-routes àServer (udp 514) à syslog-ng àObservium instance

I was also struggling with the TRAP payload, the mac, port index and vlan weren’t part of the message.

Do I need the CISCO-MAC-NOTIFICATION-MIB?

Thank you.