Configure an SNMP Server

About this task

SNMP (Simple Network Management Protocol) exchanges information between network devices and one or more central network management stations (referred to in ExtremeCloud IQ as an SNMP server). The devices send traps, which are unsolicited messages, to the management stations on UDP port 162 when events of note occur. Management stations also query monitored devices to check their operational status. The queries are in the form of get commands that management stations send on UDP port 161.

The SNMP Server Profiles table displays information about SNMP server profiles and their assignments to network policies and VGVAs (VPN Gateway Virtual Appliances), including the server profile name, a description, and the number of network policies or VGVAs that reference the SNMP server profile. Hover over any non-zero number to see the names of the policies and VGVAs.

You can create an SNMP server profile at the device level for a specific VGVA to override the SNMP server profile inherited from the network policy to which the VGVA belongs.
Note

Note

You can only add an SNMP server profile at the device level if SNMP is first enabled and configured at the network policy level.

Complete the following steps to configure an SNMP server profile.

Procedure

  1. Select the add icon.
  2. Enter a name for the server.
  3. Enter a brief description for the server.
  4. Enter the contact information of the SNMP server admin so they can be contacted if necessary.
    This can be an email address, telephone number, physical location, or a combination.
  5. Clear the check box for Disable to Send traps over CAPWAP to enable devices to send trap information (events and alarms) to ExtremeCloud IQ over their CAPWAP connection, or leave the box checked to disable this action.
  6. To add the SNMP server to the table, select the add icon.
  7. Select an SNMP server from the drop-down list.
    Choose the IP address or host name object for the SNMP server or servers that will be able to access the devices. To permit management access from a single SNMP server, choose an IP address or host name that defines just that server. To permit management access from an entire subnet, choose an IP address or host name that defines that subnet. If you do not see the IP address or host name that you need, select New and define one.
  8. Select the version of SNMP that is running on the management station you intend to use from the drop-down list.
  9. From the Operation drop-down list, select the type of activity to permit between the specified SNMP management station and the devices in the network policy to which you will assign this profile.
    Options include:
    None: Disable all SNMP activity for the specified management station.
    Get: Permit GET commands sent from the management station to a device to retrieve MIBs.
    Get and Trap: Permit the reception of GET commands from the management station and the transmission of traps to the management station.
    Trap: Permit devices to send messages notifying the management system of events of interest.
  10. In the Community field (for SNMP V2C and V1), enter a text string that must accompany queries from the management station.
    The community string acts similarly to a password, such that devices only accept queries from management stations that send the correct community string.
  11. Select Save.
    Repeat this procedure to add up to three SNMP servers to the profile.