SNMP configuration- Cisco Nexus switches

SNMP configuration on Nexus

Step1. Login to nexus switch using admin credentials.

Xshell:\> ssh 192.168.1.1 Connecting to 192.168.1.1:22... Connection established. To escape to local shell, press 'Ctrl+Alt+]'. User Access Verification Cisco Nexus Operating System (NX-OS) Software TAC support: http://www.cisco.com/tac Copyright (c) 2002-2012, Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software areowned by other third parties and used and distributed under license. Certain components of this software are licensed underthe GNU General Public License (GPL) version 2.0 or the GNULesser General Public License (LGPL) Version 2.1. A copy of each such license is available at http://www.opensource.org/licenses/gpl-2.0.php and http://www.opensource.org/licenses/lgpl-2.1.php Nexus-switch#

Step2. Create object group for the interface used by SNMP server to poll the device. In this example we use the IP address of management interface. We have given the name snmp-Interface to management interface. It is basically a IP to name mapping.

Nexus-switch(config)# object-group ip address snmp-Interface Nexus-switch(config-ipaddr-ogroup)# host 192.168.1.1

Step3. Configure access list to allow snmp communication between server and device. Source will be SNMP server IP address and destination is management interface address.

For simplicity, I have used the IP in access list; you can specifically allow the snmp ports between server and device. If you allow specific ports, please make sure that trap port (UDP 162) must also be opened.

Access list for read only servers:

Nexus-switch(config)# ip access-list Readonly-snmp-traffic Nexus-switch(config-acl)# permit ip 10.1.1.20/32 addrgroup snmp-Interface

Access list for write servers:

Nexus-switch(config)# ip access-list Readwrite-snmp-traffic Nexus-switch(config-acl)# permit ip 10.1.1.20/32 addrgroup snmp-Interface

Step4. Configure Read only community

Nexus-switch(config)#snmp-server community CISCORO group network-operator

Step5. Configure Read write community

Nexus-switch(config)#snmp-server community CISCORW group network-admin

Step7. Configure access list for snmp communities.

Nexus-switch(config)#snmp-server community CISCORO use-acl Readonly-snmp-traffic Nexus-switch(config)#snmp-server community CISCORW use-acl Readwrite-snmp-traffic

Step8. Configure the device location.

Nexus-switch(config)# # snmp-server location Lab

Step9. Configure the device contact information.

Nexus-switch(config)# snmp-server contact Network_Team

Step10. Configure the SNMP trap source address. SNMP server will receive traps with source interface mgm0. SNMP server will convert the traps to alert only if it has the correct MIB in its database.

Nexus-switch(config)# snmp-server source-interface traps mgmt 0

Step12. It enables the EIGRP traps (Authentication and SIA).

           

Nexus-switch(config)# snmp-server enable traps eigrp

Step13. Enable Linkdown traps.

Nexus-switch(config)# snmp-server enable traps link linkdown

Step14. It will send traps when HSRP state changes.

Nexus-switch(config)# snmp-server enable traps hsrp state-change

Step15. It enables traps for FAN status change.

Nexus-switch(config)# snmp-server enable traps entity entity_fan_status_change

Step16. Enable traps for module status change.

Nexus-switch(config)# snmp-server enable traps entity entity_module_status_change

Step17. Enable traps for unrecognised module

Nexus-switch(config)# snmp-server enable traps entity entity_unrecognised_module

Step18. Device will send the traps to server 10.1.1.20.

Nexus-switch(config)# snmp-server host  10.1.1.20 traps CISCOTRAPS