Cisco ASA - Configure SNMP

Unanswered Question
Mar 29th, 2010

Hi,

We have network management server. I have configured SNMP on our Cisco ASA 5520 device accordingly. My network management server can view the Firewall and i have also added the device in the server list. But i cannot see the interface through the server. We also want to configure it to monitor vpn traffic but it says that SNMP is down.

Can someone guide what steps should i configure to make sure snmp is correctly configured in Cisco ASA 5520 so that i can monitor the interface and its bandwidth ?

Thanks in advance.

K.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
ciscokalpesh Mon, 03/29/2010 - 05:32

Hi,

Thanks for reply.

I have gone through that document and steps. Configuration for SNMP is quite simple. But i am not able to see the interfaces from my Network Management server. All other devices configured are fine, except the firewall.

Do we have to configure anything related to its interface ?

Thanks again,

K.

ciscokalpesh Mon, 03/29/2010 - 21:33

Cisco Adaptive Security Appliance Software Version 8.0(4)
Device Manager Version 6.1(3)

Hardware:   ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

ciscokalpesh Wed, 03/31/2010 - 06:15

Hi,

I check with the support people of the network management server. They said, that there is no need to change MIB on the server or so.

I have configured the firewall as below,

snmp-server host inside 192.168.168.32 community ASASNMP version 2c
no snmp-server location
no snmp-server contact
snmp-server community ASASNMP
snmp-server enable traps syslog

Please guide if anything is incorrect or more configuration is required.

Thanks,

K

Jennifer Halim Wed, 03/31/2010 - 14:02

Yes, that looks correct. The SNMP configuration on ASA is very simple, and if the NMS server can poll other things but the ASA interfaces, it doesn't seem to be an ASA issue. It sounds more like a MIB issue.

If you configure packet capture on the inside interface of the ASA for the SNMP poll traffic, can you check in pcap format the snmp poll packet especially for the interface polling.

Tramp_Sergey Sat, 02/11/2012 - 09:28

Please help. I configured snmp on the ASA like this

snmp-server host inside 192.168.168.32 community ASASNMP

no snmp-server location

no snmp-server contact

snmp-server community ASASNMP

snmp but the server did not receive.

Also for the ACA have a router on it, I also set up

snmp-server community ro ASASNMP

and also did not get. While all the other devices on the network all about. Please help. I configured snmp on the ASA like this

snmp-server host inside 192.168.168.32 community ASASNMP
no snmp-server location
no snmp-server contact
snmp-server community ASASNMP

snmp but the server did not receive.
Also for the ACA have a router on it, I also set up

snmp-server community ASASNMP ro
and also did not get. While all the other devices on the network all about.

mvsheik123 Mon, 02/13/2012 - 09:26

Hi Kalpesh,

Do you have any other firewall in between? If so, it may be blocking the UDP traffic. If not, What is your managment software & version? It appears to be the issue with MIBs on management station. Apart from support, did you try to search online? You may not be the first one who is having this issue with this management software.

Thx

MS

Actions

Login or Register to take actions

This Discussion

Posted March 29, 2010 at 2:13 AM
Stats:
Replies:9 Avg. Rating:
Views:47984 Votes:0
Shares:1

Related Content

Discussions Leaderboard