Chapter 42
Monitoring the Security Appliance
Table 42-1
SNMP MIB and Trap Support (continued)
MIB or Trap Support
Cisco Firewall MIB
Cisco Memory Pool MIB
Cisco Process MIB
Cisco Syslog MIB
Enabling SNMP
The SNMP agent that runs on the security appliance performs two functions:
•
•
To enable the SNMP agent and identify an NMS that can connect to the security appliance, follow these
steps:
Ensure that the SNMP server on the security appliance is enabled by entering the following command:
Step 1
hostname(config)# snmp-server enable
The SNMP server is enabled by default.
Step 2
To identify the IP address of the NMS that can connect to the security appliance, enter the following
command:
hostname(config)# snmp-server host interface_name ip_address [trap | poll] [community
text] [version 1 | 2c] [udp-port port]
Specify trap or poll if you want to limit the NMS to receiving traps only or browsing (polling) only. By
default, the NMS can use both functions.
SNMP traps are sent on UDP port 162 by default. You can change the port number using the udp-port
keyword.
To specify the community string, enter the following command:
Step 3
hostname(config)# snmp-server community key
The SNMP community string is a shared secret between the security appliance and the NMS. The key is
a case-sensitive value up to 32 characters in length. Spaces are not permitted.
(Optional) To set the SNMP server location or contact information, enter the following command:
Step 4
OL-10088-01
Description
The security appliance supports browsing of the following groups:
The security appliance supports browsing of the following table:
The security appliance supports browsing of the following table:
The security appliance supports the following trap:
You cannot browse this MIB.
Replies to SNMP requests from NMSs.
Sends traps (event notifications) to NMSs.
cfwSystem
•
The information is cfwSystem.cfwStatus, which relates to failover
status, pertains to the entire device and not just a single context.
ciscoMemoryPoolTable—The memory usage described in this table
•
applies only to the security appliance general-purpose processor, and
not to the network processors.
cpmCPUTotalTable
•
clogMessageGenerated
•
Cisco Security Appliance Command Line Configuration Guide
Using SNMP
42-3