Cisco 500 Series, Configuration Manual

Page: 939 / 1140

42-3
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 42 Monitoring the Security Appliance
Using SNMP
Enabling SNMP
The SNMP agent that runs on the adaptive security appliance performs two functions:
•
Replies to SNMP requests from NMSs.
• Sends traps (event notifications) to NMSs.
To enable the SNMP agent and identify an NMS that can connect to the adaptive security appliance,
perform the following steps:
Step 1
Ensure that the SNMP server on the adaptive security appliance is enabled by entering the following
command:
hostname(config)# snmp-server enable
The SNMP server is enabled by default.
Step 2
To identify the IP address of the NMS that can connect to the adaptive security appliance, enter the
following command:
hostname(config)# snmp-server host interface_name ip_address [ trap | poll ] [ community
text ] [ version 1 | 2c ] [ udp-port port ]
Where interface_name is the name of the NMS and ip_address is the IP address of the NMS.
Specify trap or poll if you want to limit the NMS to receiving traps only or browsing (polling) only. By
default, the NMS can use both functions.
SNMP traps are sent on UDP port 162 by default. You can change the port number using the udp-port
keyword.
Step 3
To specify the community string, enter the following command:
hostname(config)# snmp-server community key
Cisco Firewall MIB The adaptive security appliance supports browsing of the following
groups:
•
cfwSystem
The information is cfwSystem.cfwStatus, which relates to failover
status, pertains to the entire device and not just a single context.
Cisco Memory Pool MIB The adaptive security appliance supports browsing of the following table:
• ciscoMemoryPoolTable—The memory usage described in this table
applies only to the security appliance general-purpose processor, and
not to the network processors.
Cisco Process MIB The adaptive security appliance supports browsing of the following table:
•
cpmCPUTotalTable
Cisco Syslog MIB The adaptive security appliance supports the following trap:
•
clogMessageGenerated
You cannot browse this MIB.
Table 42-1 SNMP MIB and Trap Support (continued)
MIB or Trap Support Description