SNMP traps for Config changes

Unanswered Question
Feb 26th, 2008

Does anyone know if there is a MIB tree which holds config changes information or last config change etc?

I have used the CONFIG-MAN mib to determine last change of config (ie timestamp) but I have no idea how to log config changes via SNMP?

Any ideaS?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
ciscograyaw Tue, 02/26/2008 - 12:42

You can use 'snmp-server enable traps config' to throw an SNMP trap on config change.

ciscograyaw Tue, 02/26/2008 - 12:43

That being said, the way we internally manage configs is we wait for the syslog message on our syslog server (this was setup before we had an SNMP trap server that we could script from), then fire off a quick bash script that uses CONFIG-COPY-MIB to upload the new config locally, and then feed that into a locally-hosted Wiki - automated config tracking and auditing.

mikedelafield Wed, 02/27/2008 - 01:53

on the later versions of IOS i know the Archive feature logs config changes and command entries.

I was wondering if there was a way of using SNMP to query these commands?

Actions

This Discussion