Download UTM project

11
Appendix D: FAQ
11.1.1
How to configure SNMP on a Cisco router or
switch.
To configure SNMP, I suggest starting off with the optional step of identifying your
device. Here’s an example:
Switch(config)#
snmp-server
contact
Uncini-Michel
Switch(config)# snmp-server location General impianti, gruppo loccioni
Switch(config)# snmp-server Cisco EnergyWise
Next, we need to configure SNMP. There are a great many ways to configure
SNMP. For this example, we’ll configure the bare minimum to allow you to manage
a Cisco router or switch.
To do this, we’ll create a community string. Think of a community string as a password for certain types of access to the device. Let’s configure this device to have a
community string good for both reading and writing to the device. Here’s an example:
Switch(config)# snmp-server community EnergyWise RW
Now UTM, wherever it is on the network, can both read (i.e., view) and write (i.e.,
change) device configurations and statistics. (With a more advanced NMS, you
can use SNMP to make configuration changes on your device, but that isn’t
SNMP’s most popular use.)
We set our community string to EnergyWise for this example. Of course, set it using your own internal complex password.
Let’s take it a step further and configure the router or switch to alert UTM when an
interface goes down or up.
We’ll configure the router or switch to send an SNMP trap to host 192.168.180.1
(Where UTM is running) with our community string so we know it’s authentic. We
want SNMP to send these traps if the interfaces go down or go up, or if someone
reboots the router. Here are the commands:
Switch(config)# snmp-server host 192.168.180.1 version 1 EnergyWise
Switch(config)# snmp-server enable traps snmp
There are some SNMP vulnerabilities in certain versions of the Cisco IOS 12.0 to
12.3, so be cautious. Make sure you aren’t using one of the vulnerable versions,
and take steps to configure SNMP as securely as possible.
While it’s easy to configure SNMP, configurations can also get very complex. I
highly recommend taking the first step of using SNMP to develop a baseline of
your router’s WAN interface utilization over time. From there, you could move on
to more advanced uses for SNMP.
11.1.2
How to retrieve devices' name and numbers by
SNMP request.