SNMP (Simple Network Management Protocol) exchanges information between network
devices and one or more central network management stations (referred to in
ExtremeCloud IQ as an SNMP server). The devices send traps, which are unsolicited
messages, to the management stations on UDP port 162 when events of note occur.
Management stations also query monitored devices to check their operational status.
The queries are in the form of get commands that management stations send on UDP
port 161.
The SNMP Server Profiles table displays information about SNMP
server profiles and their assignments to network policies and VGVAs (VPN Gateway
Virtual Appliances), including the server profile name, a description, and the
number of network policies or VGVAs that reference the SNMP server profile. Hover
over any non-zero number to see the names of the policies and VGVAs.
You can create an SNMP server profile at the device level for a specific VGVA to
override the SNMP server profile inherited from the network policy to which the VGVA
belongs.
Note
You can only add an SNMP server profile at the device level if SNMP
is first enabled and configured at the network policy level.
Complete the following steps to configure an SNMP server profile.
-
Select the add icon.
-
Enter a name for the
server.
-
Enter a brief description for the server.
-
Enter the contact information of the SNMP server admin so they can be contacted
if necessary.
This can be an email address, telephone number, physical location, or a
combination.
-
Clear the check box for Disable to Send traps over
CAPWAP to enable devices to send trap information (events and
alarms) to ExtremeCloud IQ over their CAPWAP connection, or leave the box
checked to disable this action.
-
To add the SNMP server to the
table, select the add icon.
-
Select an SNMP server from the drop-down list.
Choose the IP address or host
name object for the SNMP server or servers that will be able to access the
devices. To permit management access from a single SNMP server, choose an IP
address or host name that defines just that server. To permit management access
from an entire subnet, choose an IP address or host name that defines that
subnet. If you do not see the IP address or host name that you need, select
New
and define one.
-
Select the version of SNMP that is running on the management station you intend
to use from the drop-down list.
-
From the Operation
drop-down list, select the type of activity to permit between the specified SNMP
management station and the devices in the network policy to which you will
assign this profile.
Options include:
None: Disable all
SNMP activity for the specified management station.
Get: Permit GET
commands sent from the management station to a device to retrieve MIBs.
Get and Trap:
Permit the reception of GET commands from the management station and the
transmission of traps to the management station.
Trap: Permit
devices to send messages notifying the management system of events of
interest.
-
In the Community field (for SNMP V2C and V1), enter a
text string that must accompany queries from the management station.
The community string acts similarly to a password, such that devices only
accept queries from management stations that send the correct community
string.
-
Select Save.
Repeat this procedure to add up
to three SNMP servers to the profile.
