Activate the SNMP agent on Secure SD-WAN Engines

The SNMP Agent is responsible for SNMP-related tasks on the Secure SD-WAN Engines.

Before you begin

If you use SNMPv3, there must be one or more user names defined in the properties of the SNMP Agent element.

When you use SNMPv3, you can specify the SNMP engine ID for each single Secure SD-WAN Engine and each node of Secure SD-WAN Engine clusters. The SNMP engine ID is a unique identifier for the Secure SD-WAN Engine that is used by the SNMP agent. The engine ID is used with a hash function to generate keys for authentication and encryption of SNMPv3 messages. If you do not specify the SNMP engine ID, an SNMP engine ID is automatically generated.

For more details about the product and how to configure features, click Help or press F1.

Steps

Right-click an engine element, then select Edit <element type>.
In the navigation pane on the left, browse to General > SNMP and LLDP.
From the SNMP Agent drop-down list, select the SNMP Agent that you want to activate.
In the SNMP Location field, enter the string that is returned on queries to the SNMPv2-MIB or SNMPv2-MIB-sysLocation object.
In the Listening IP Addresses field, add one or more IPv4 or IPv6 addresses.
(Optional, SNMPv3 only) Specify the value of the SNMP Engine ID option.
- Single Secure SD-WAN Engines — In the SNMP Engine ID field, enter a unique identifier for the Secure SD-WAN Engine.
- Secure SD-WAN Engine clusters — Browse to General > Clustering, then enter a unique identifier for each node in the SNMP Engine ID cell.
Click Save and Refresh to transfer the changes.

Engine Editor > General > SNMP and LLDP

Use this branch to enable the Secure SD-WAN Engine to send SNMP traps and to select the LLDP Profile for the Secure SD-WAN Engine.

Note: These settings are not supported for Virtual Engines.

Option	Definition
SNMP section
SNMP Agent	Enables the Secure SD-WAN Engine to send SNMP traps. Select — Select an existing SNMP Agent element. None — Disables the sending of SNMP traps. New — Create an SNMP Agent element.
SNMP Location	Specifies the SNMP location string that is returned on queries to the SNMPv2-MIB or SNMPv2-MIB-sysLocation object.
SNMP Engine ID (Single Secure SD-WAN Engines and SNMPv3 only)	A unique identifier for the Secure SD-WAN Engine that is used by the SNMP agent. The engine ID is used with a hash function to generate keys for authentication and encryption of SNMPv3 messages. If you do not specify the SNMP engine ID, an SNMP engine ID is automatically generated.
Listening IP Addresses	The IPv4 or IPv6 addresses from which SNMP traps are sent. Click Add to add an element to the list, or Remove to remove the selected element.
LLDP section
LLDP Profile (Secure SD-WAN Engines and Master Engines in the Engine/VPN role only)	The LLDP Profile element that specifies settings for LLDP announcements that the Secure SD-WAN Engine announces. Click Select to select an element.

Engine Editor > General > Clustering

Use this branch to view nodes and add new nodes to the Secure SD-WAN Engine cluster.

Option	Definition
Node ID (Not editable)	Shows the ID number of the node.
Name	Specifies the name of the node. Double-click the cell to edit the name.
Configuration Status (Not editable)	Shows the configuration status of the node.
Certificate (Optional)	Shows information about the node's certificate for external certificate management. Right-click the cell, then select Edit Certificate to create a certificate request for the Secure SD-WAN Engine node. You must create a separate certificate request for each Secure SD-WAN Engine node.
Version (Not editable)	Shows the version of the Secure SD-WAN Engine software that is installed on the engine.
Comment (Optional)	A comment for your own reference.
SNMP Location	Specifies the SNMP location string that is returned on queries to the SNMPv2-MIB or SNMPv2-MIB-sysLocation object.
SNMP Engine ID (SNMPv3 only)	A unique identifier for each Secure SD-WAN Engine node that is used by the SNMP agent. The engine ID is used with a hash function to generate keys for authentication and encryption of SNMPv3 messages. If you do not specify the SNMP engine ID, an SNMP engine ID is automatically generated.
Disabled	Disables the node. You can enable the node later.
Add Node	Adds a node to the cluster. Opens the Engine Node Properties dialog box.
Edit Node	Allows you to change the properties of the selected node. Opens the Engine Node Properties dialog box.
Remove Node	Deletes the selected node. The deleted node cannot be restored.
Clustering Mode (Not Layer 2 Engines)	Balancing — All nodes are simultaneously online providing enhanced performance and high availability if there is node failure. Balancing mode is the default mode. Standby — Only one node can be online at a time. We recommend having at least one other node on standby to allow automatic takeover if there is failure. Several nodes can be on standby at a time. A randomly selected standby node is turned online when the online node fails. Note: Only standby clustering mode is supported for Layer 2 Engine Clusters.
Clustering	Allows you to change advanced settings for the cluster. Opens the Advanced Cluster Settings dialog box.

Select dialog box (for SNMP listening IP addresses)

Use this branch to select the IP addresses from which SNMP traps are sent.

Option	Definition
Select Interface	Lists the available interfaces and their IP addresses. You can select one or more interfaces.
Select	Adds the selected IP addresses to the configuration and closes the window.