Create an SNMP Agent for SNMP version 3

Configure an SNMP Agent for SNMP version 3 so that Engines or the Secure SD-WAN Manager can share network management information using the SNMP protocol.

For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Select Configuration.
  2. Browse to Other Elements > Engine Properties > SNMP Agents.
  3. Right-click SNMP Agents, then select New SNMP Agent.
  4. In the Name field, enter a unique for the SNMP Agent.
  5. From the Version drop-down list, select v3.
  6. In the User Names section, add one or more users names.
    1. Click Add.
    2. In the User Name field, enter the user name.
    3. From the Protocol options, select the authentication protocol, then enter a password in the Password field.
    4. From the Privacy options, select the privacy protocol, then enter a password in the Privacy Password field.
  7. (Optional) In the Monitoring section, click Add, then select the user for monitoring.
  8. (Optional) In the Listening Port field, enter the UDP port number that the SNMP agent listens to.
  9. In the Contact field, enter the contact information for the person responsible for the Engines or the Appliance.
  10. Click OK.

SNMP Agent Properties dialog box

Use this dialog box to define the properties of an SNMP Agent.

Option Definition
Name The name of the element.
Version Specifies the SNMP version.
  • v1 — SNMPv1 (RFC1157)
    Note: The Appliance does not support SNMP v1.
  • v2c — SNMPv2c (RFCs 1901 and 3416)
  • v3 — SNMPv3 (RFC 3414)
Comment

(Optional)

 A comment for your own reference.
Category

(Optional)

 Includes the element in predefined categories. Click Select to select a category.
Option Definition
When Version is v1 or v2c
Monitoring section
Communities Shows the selected communities.
Add Adds a community or a user name. Opens a Properties dialog box.
Remove Removes the selected community or user name.
Listening Port

(Engines only)

Specifies the UDP Listening Port number that the SNMP agent listens to.

The default port is 161. The Appliance always uses the default port.
Contact Specifies the contact information for the person responsible for the engines. This string is returned to queries from the SNMPv2-MIB object.
Traps section

(Engines only)
Community Enter the community string.

Only alphanumeric characters are supported.
Destinations Specifies the IP addresses and UDP ports of the destinations to which the SNMP traps are sent. The default port is 162. Click to edit the cells.
Add Adds a row to the table.
Remove Removes the selected destination.
Active Traps

Specifies the events for which you want to set a trap.

The possible events are:

  • Boot (for example, startup of the agent process by minit)
  • Shutdown
  • Going Online
  • Going Offline
  • Policy Applied
  • User Login (via console or with SSH)
  • Hardware Alerts (for appliances that support hardware monitoring)
Active Shows whether traps are active for the event.
Event Shows the available events.
Option Definition
When Version is v3
User Names section
Name Shows the user name.
Authentication Protocol Shows the authentication protocol defined for the SNMP user.
Privacy Protocol Shows the privacy protocol defined for the SNMP user.
Add Opens the SNMP User Properties dialog box.
Edit Opens the SNMP User Properties dialog box for the selected user name.
Remove Removes the selected user name.
Monitoring section
User Names Shows the selected user names.

Only alphanumeric characters are supported.
Add Adds a community or a user name. Opens a Properties dialog box.
Remove Removes the selected community or user name.
Listening Port

(Engines only)

Specifies the UDP Listening Port number that the SNMP agent listens to.

The default port is 161. The Appliance always uses the default port.
Contact Specifies the contact information for the person responsible for the engines. This string is returned to queries from the SNMPv2-MIB object.
Traps section

(Engine Engines only)
User Name Select the user name from the drop-down list.
Destinations Specifies the IP addresses and UDP ports of the destinations to which the SNMP traps are sent. The default port is 162. Click to edit the cells.
Add Adds a row to the table.
Remove Removes the selected destination.
Active Traps Specifies the events for which you want to set a trap.

The possible events are:

  • Boot (for example, startup of the agent process by minit)
  • Shutdown
  • Going Online
  • Going Offline
  • Policy Applied
  • User Login (via console or with SSH)
  • Hardware Alerts (for appliances that support hardware monitoring)
Active Shows whether traps are active for the event.
Event Shows the available events.

SNMP User Properties dialog box

Use this dialog box to define the properties of an SNMP User.

Option Definition
User name Specifies the SNMP user name.
Authentication
Protocol

Specifies the authentication protocol for the SNMP user:

  • No — No authentication protocol is used.
  • MD5 — The MD5 authentication protocol is used.
  • SHA — The SHA authentication protocol is used.
Password Enter the password. By default, passwords and keys are not shown in plain text. To show the password or key, deselect the Hide option. The Password option is not available when the Protocol is No.
Privacy
Privacy Protocol Specifies the privacy protocol for the SNMP user:
  • No — No encryption protocol is used.
  • DES — The DES encryption protocol is used.
  • AES — The AES encryption protocol is used.
Privacy Password Enter the password. By default, passwords and keys are not shown in plain text. To show the password or key, deselect the Hide option. The Privacy Password option is not available when the Privacy Protocol is No.

Properties dialog box (SNMP monitoring)

Use this dialog box to add a community or a user name for SNMP monitoring.

Option Definition
Enter a community

(SNMP v1 or v2c only)

Enter the community string. The community string is used for authentication in monitoring.
Select a User Name

(SNMP v3 only)

Select the user name from the drop-down list.