SNMP traps on FWSM...HELP!

UTVi-NetAdmin · ‎10-18-2007

Hi,

I am trying to configure the sending of basic snmp traps on a FWSM running 3.2(1) to ServersAlive and have had some success.

Purely for testing purposes, I am able to get alerted on sending snmp requests to the FWSM with bad authentication.

According to "Cisco ASA, PIX, and FWSM Firewall Handbook, Second Edition" Hucaby et al. the FWSM,PIX etc sends OID's depending on product.

For example, FWSM in single-congle context mode sends 1.3.6.1.4.1.9.1.522.

I have this configured as my enterprise OID on ServersAlive NMS but have no specific OID 'leaf-node'.

When I send a snmpget to the FWSM with a bad community string, I get an alert, as desired.

Can someone tell me where specific OID's come into play with FWSM's? For example, how is the entire OID constructed if it wnats to send a warm/cold start trap?

Any help appreciated.

Mark

FWSM:

snmp-server host VLAN205_NMS 10.0.0.1 trap community testsnmp

snmp-server enable traps

ebreniz · ‎10-24-2007

A SNMP object ID (OID) for the module displays in SNMP event traps sent from the module. The Firewall Services Module provides the system OID in SNMP event traps and SNMP mib-2.system.sysObjectID equal to the (1.3.6.1.4.1.9.1.227) original PIX firewall OID. The following URL will help you:http://www.cisco.com/en/US/docs/security/fwsm/fwsm11/configuration/guide/advcfg.html#wp1035857

http://www/en/US/docs/security/fwsm/fwsm22/configuration/guide/monitor.html#wp1002684