Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included
Thanks !
Hello,
Nobody uses SNMP on CISCO ??
_______________ Objet : Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included
Thanks !
Someone is using 😊
I use it like this:
snmp-server group Observium v3 priv read SNMPv3PL access acl-monitoring snmp-server view SNMPv3PL iso included snmp-server user SNMP-USR_PL-RO Observium v3 auth sha BlaBlaBla priv aes 128 Blablabla2
ip access-list standard acl-monitoring permit x.x.x.x (obs serv) deny any log
Jacek Dąbrowski
From: observium observium-bounces@observium.org On Behalf Of Sébastien 65 via observium Sent: Friday, November 19, 2021 8:24 PM To: observium@observium.org Cc: Sébastien 65 sebastien-65@live.fr Subject: [Observium] Re : Best SNMP configuration for CISCO switch and router
Hello,
Nobody uses SNMP on CISCO ??
_______________ Objet : Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included
Thanks !
There used to be an example configuration in our documentation but it seems to not be there anymore.
Configuration is quite straightforward, just define a read only community and attach it to an access list only allowing your management station to reach it.
Jacek’s example is snmpv3, but you can use v2c too, it’s a little simpler.
Adam.
Sent from my iPhone
On 19 Nov 2021, at 19:40, Jacek Dąbrowski via observium observium@observium.org wrote:
Someone is using 😊
I use it like this:
snmp-server group Observium v3 priv read SNMPv3PL access acl-monitoring snmp-server view SNMPv3PL iso included snmp-server user SNMP-USR_PL-RO Observium v3 auth sha BlaBlaBla priv aes 128 Blablabla2
ip access-list standard acl-monitoring permit x.x.x.x (obs serv) deny any log
Jacek Dąbrowski
From: observium observium-bounces@observium.org On Behalf Of Sébastien 65 via observium Sent: Friday, November 19, 2021 8:24 PM To: observium@observium.org Cc: Sébastien 65 sebastien-65@live.fr Subject: [Observium] Re : Best SNMP configuration for CISCO switch and router
Hello,
Nobody uses SNMP on CISCO ??
Objet : Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included
Thanks !
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
I recommend also using the ifindex persistence to prevent OID interface indexes changing after a reload.
snmp-server ifindex persist
On 20 Nov 2021, at 12:37 pm, Adam Armstrong via observium observium@observium.org wrote:
There used to be an example configuration in our documentation but it seems to not be there anymore.
Configuration is quite straightforward, just define a read only community and attach it to an access list only allowing your management station to reach it.
Jacek’s example is snmpv3, but you can use v2c too, it’s a little simpler.
Adam.
Sent from my iPhone
On 19 Nov 2021, at 19:40, Jacek Dąbrowski via observium observium@observium.org wrote:
Someone is using 😊
I use it like this:
snmp-server group Observium v3 priv read SNMPv3PL access acl-monitoring snmp-server view SNMPv3PL iso included snmp-server user SNMP-USR_PL-RO Observium v3 auth sha BlaBlaBla priv aes 128 Blablabla2
ip access-list standard acl-monitoring permit x.x.x.x (obs serv) deny any log
Jacek Dąbrowski
From: observium observium-bounces@observium.org On Behalf Of Sébastien 65 via observium Sent: Friday, November 19, 2021 8:24 PM To: observium@observium.org Cc: Sébastien 65 sebastien-65@live.fr Subject: [Observium] Re : Best SNMP configuration for CISCO switch and router
Hello,
Nobody uses SNMP on CISCO ??
Objet : Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included
Thanks !
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org mailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Oh yeah, this is functionally a requirement!
Adam.
From: Michael obslist@smarsz.com Sent: 20 November 2021 02:43 To: Observium observium@observium.org Cc: Adam Armstrong adama@observium.org Subject: Re: [Observium] Re : Best SNMP configuration for CISCO switch and router
I recommend also using the ifindex persistence to prevent OID interface indexes changing after a reload.
snmp-server ifindex persist
On 20 Nov 2021, at 12:37 pm, Adam Armstrong via observium <observium@observium.org mailto:observium@observium.org > wrote:
There used to be an example configuration in our documentation but it seems to not be there anymore.
Configuration is quite straightforward, just define a read only community and attach it to an access list only allowing your management station to reach it.
Jacek’s example is snmpv3, but you can use v2c too, it’s a little simpler.
Adam.
Sent from my iPhone
On 19 Nov 2021, at 19:40, Jacek Dąbrowski via observium <observium@observium.org mailto:observium@observium.org > wrote:
Someone is using 😊
I use it like this:
snmp-server group Observium v3 priv read SNMPv3PL access acl-monitoring
snmp-server view SNMPv3PL iso included
snmp-server user SNMP-USR_PL-RO Observium v3 auth sha BlaBlaBla priv aes 128 Blablabla2
ip access-list standard acl-monitoring
permit x.x.x.x (obs serv)
deny any log
Jacek Dąbrowski
From: observium <observium-bounces@observium.org mailto:observium-bounces@observium.org > On Behalf Of Sébastien 65 via observium Sent: Friday, November 19, 2021 8:24 PM To: observium@observium.org mailto:observium@observium.org Cc: Sébastien 65 <sebastien-65@live.fr mailto:sebastien-65@live.fr > Subject: [Observium] Re : Best SNMP configuration for CISCO switch and router
Hello,
Nobody uses SNMP on CISCO ??
_______________
Objet : Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2
snmp-server view MIB-2 iso included
Thanks !
_______________________________________________ observium mailing list observium@observium.org mailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________ observium mailing list mailto:observium@observium.org observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
Hello all !
Thanks for your answers 😉
I take note of the important tip "snmp-server ifindex persist" to add on the switch and router !!
I also use an access-list to only authorize my OBSERVIUM server. The access-list is directly on the snmp-server user and not on the snmp-server group. I think it must come to the same ! (?)
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included snmp-server user MY-USER READONLY v3 auth sha XXX priv aes 128 ZZZ access IP-OBSERVIUM ! ip access-list standard IP-OBSERVIUM permit A.B.C.D deny any !
Actually my question is more about the "snmp-server enable traps XXXXX" variant compared to "snmp-server view MIB-2 iso included"
I can't find a clear answer on both modes and also which one to integrate with Observium.
________________________________ De : observium observium-bounces@observium.org de la part de Michael via observium observium@observium.org Envoyé : samedi 20 novembre 2021 03:43 À : Observium observium@observium.org Cc : Michael obslist@smarsz.com Objet : Re: [Observium] Re : Best SNMP configuration for CISCO switch and router
I recommend also using the ifindex persistence to prevent OID interface indexes changing after a reload.
snmp-server ifindex persist
On 20 Nov 2021, at 12:37 pm, Adam Armstrong via observium <observium@observium.orgmailto:observium@observium.org> wrote:
There used to be an example configuration in our documentation but it seems to not be there anymore.
Configuration is quite straightforward, just define a read only community and attach it to an access list only allowing your management station to reach it.
Jacek’s example is snmpv3, but you can use v2c too, it’s a little simpler.
Adam.
Sent from my iPhone
On 19 Nov 2021, at 19:40, Jacek Dąbrowski via observium <observium@observium.orgmailto:observium@observium.org> wrote:
Someone is using 😊
I use it like this:
snmp-server group Observium v3 priv read SNMPv3PL access acl-monitoring snmp-server view SNMPv3PL iso included snmp-server user SNMP-USR_PL-RO Observium v3 auth sha BlaBlaBla priv aes 128 Blablabla2
ip access-list standard acl-monitoring permit x.x.x.x (obs serv) deny any log
Jacek Dąbrowski
From: observium <observium-bounces@observium.orgmailto:observium-bounces@observium.org> On Behalf Of Sébastien 65 via observium Sent: Friday, November 19, 2021 8:24 PM To: observium@observium.orgmailto:observium@observium.org Cc: Sébastien 65 sebastien-65@live.fr Subject: [Observium] Re : Best SNMP configuration for CISCO switch and router
Hello,
Nobody uses SNMP on CISCO ??
_______________ Objet : Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included
Thanks !
_______________________________________________ observium mailing list observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observiumhttps://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpostman.memetic.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fobservium&data=04%7C01%7C%7C500a72a39bc646e589a108d9abcfa26a%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637729730738736958%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=4UWM6WZkOpPZhYirZDlJT96doZSY26KbZ35fPRKterI%3D&reserved=0 _______________________________________________ observium mailing list observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observiumhttps://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fpostman.memetic.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fobservium&data=04%7C01%7C%7C500a72a39bc646e589a108d9abcfa26a%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637729730738746950%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=iqy%2B5DJhDynFyyoangObFk5AaFj0BhXJ4TUMgmad5%2FY%3D&reserved=0
Observium doesn’t handle traps.
Adam.
Sent from my iPhone
On 20 Nov 2021, at 12:02, Sébastien 65 via observium observium@observium.org wrote:
Hello all !
Thanks for your answers 😉
I take note of the important tip "snmp-server ifindex persist" to add on the switch and router !!
I also use an access-list to only authorize my OBSERVIUM server. The access-list is directly on the snmp-server user and not on the snmp-server group. I think it must come to the same ! (?)
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included snmp-server user MY-USER READONLY v3 auth sha XXX priv aes 128 ZZZ access IP-OBSERVIUM ! ip access-list standard IP-OBSERVIUM permit A.B.C.D deny any !
Actually my question is more about the "snmp-server enable traps XXXXX" variant compared to "snmp-server view MIB-2 iso included"
I can't find a clear answer on both modes and also which one to integrate with Observium.
De : observium observium-bounces@observium.org de la part de Michael via observium observium@observium.org Envoyé : samedi 20 novembre 2021 03:43 À : Observium observium@observium.org Cc : Michael obslist@smarsz.com Objet : Re: [Observium] Re : Best SNMP configuration for CISCO switch and router
I recommend also using the ifindex persistence to prevent OID interface indexes changing after a reload.
snmp-server ifindex persist
On 20 Nov 2021, at 12:37 pm, Adam Armstrong via observium observium@observium.org wrote:
There used to be an example configuration in our documentation but it seems to not be there anymore.
Configuration is quite straightforward, just define a read only community and attach it to an access list only allowing your management station to reach it.
Jacek’s example is snmpv3, but you can use v2c too, it’s a little simpler.
Adam.
Sent from my iPhone
On 19 Nov 2021, at 19:40, Jacek Dąbrowski via observium observium@observium.org wrote:
Someone is using 😊
I use it like this:
snmp-server group Observium v3 priv read SNMPv3PL access acl-monitoring snmp-server view SNMPv3PL iso included snmp-server user SNMP-USR_PL-RO Observium v3 auth sha BlaBlaBla priv aes 128 Blablabla2
ip access-list standard acl-monitoring permit x.x.x.x (obs serv) deny any log
Jacek Dąbrowski
From: observium observium-bounces@observium.org On Behalf Of Sébastien 65 via observium Sent: Friday, November 19, 2021 8:24 PM To: observium@observium.org Cc: Sébastien 65 sebastien-65@live.fr Subject: [Observium] Re : Best SNMP configuration for CISCO switch and router
Hello,
Nobody uses SNMP on CISCO ??
Objet : Best SNMP configuration for CISCO switch and router
Hello list,
What is the best SNMP configuration to use to feed back information from switch (Catalyst) and router (ASR) ?
I use the following configuration on my equipment but I wonder if there is not better (MIB) :
snmp-server group READONLY v3 priv read MIB-2 snmp-server view MIB-2 iso included
Thanks !
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
participants (4)
-
Adam Armstrong
-
Jacek.Dabrowski@selgros.pl
-
Michael
-
Sébastien 65