Controller SNMP management

We faced one recent issue with WLC configuration behavior and explaining our observation and workaround we did. If there is an alternate better approach, please suggest.
Requirement
Requirement is to manage the WLC (5508 with 7.4 code) using two SNMP managers in different locations. Also these two Servers should use the same community string to manage WLC.
Observation
We were able to configure the SNMP community string for one server IP (to allow access) through GUI
While trying to add another Server – IP with same community string – it didn’t allow
As per the configuration guide, Controller can use only one IP address range to manage SNMP community.
So we cannot configure the same community string to allow only two different server IP addresses
Configuration reference>
http://www.cisco.com/en/US/docs/wireless/controller/7.4/configuration/guides/consolidated/b_cg74_CONSOLIDATED_chapter_0111.html
Solution
We currently configured the major subnet ( 10.x / 8 - two match both server addresses) and it works fine
Also when we tried 0.0.0.0 / 0.0.0.0 , it didn’t work (SNMP was failing)
But this creates a security issue wherein anybody can poll the WLC. Please suggest if something else can be done.
Regards,
Guru

This is not paossible. You would need to have two different community strings in order to not get an error.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Similar Messages

Writing SNMP Manager using SNMP4J

Hello,
I am writing a SNMP Manager that is supposed to do the following:
(1) Send snmp commands to snmp-agents, and handle thier response.
(2) receive snmp traps from snmp-agents.
I am using SNMP4J software package for writing the snmp manager.
I would like to use a SINGLE Snmp object (SNMP4J object) , both
for sending a snmp command and for receiving snmp traps.
SO far, I have written two separate programs:
*** Program 1:
** The first program only listens for Snmp trap-PDUs.
** Its main code is as follows:
     // configure Snmp object
     UdpAddress address = new UdpAddress("127.0.0.1/1990");
     TransportMapping transport = new DefaultUdpTransportMapping(address);
     Snmp snmp = new Snmp(transport);
     transport.listen();
     // handle received traps here
     CommandResponder trapPrinter = new CommandResponder() {
          public synchronized void processPdu(CommandResponderEvent e) {
               PDU command = e.getPdu();
               if (command != null) {
                    System.out.println(command.toString());
     snmp.addCommandResponder(trapPrinter);
*** Program 2:
** The second program sends GET PDUs, and its main code is as follows:
     // configure Snmp object
     UdpAddress targetAddress = new UdpAddress("127.0.0.1/1985");
     CommunityTarget target = new CommunityTarget();
     target.setCommunity(new OctetString("public"));
     target.setAddress(targetAddress);
     target.setRetries(2);
     target.setTimeout(10000); // was 1000 !!!
     target.setVersion(SnmpConstants.version1);
     Snmp snmp = new Snmp(new DefaultUdpTransportMapping());
     snmp.listen();
     // prepare the PDU for sending
     PDU command = new PDU();
     command.setType(PDU.GET);
     command.add(new VariableBinding(new OID("1.3.6.1.4.1.1331.11.5.1.0")));
     // now send the PDU
     ResponseEvent responseEvent = snmp.send(pdu, target);
     if (responseEvent != null)
          // response has arrived. handle it
     else
          System.out.println("null response received...");
I would like to unite these two programs into one, however, I cannot seem to
properly allocate one Snmp object to handle both the sending and receiving of PDUs.
I run two threads: thread-1 that does the listening for snmp traps,
and thread-2 which in charge of sending get/set PDUs.
I allocate the Snmp object in one place as follows:
     TransportMapping transport = new DefaultUdpTransportMapping(new UdpAddress("127.0.0.1/1990"));
     Snmp snmp = new Snmp(transport);
     snmp.listen();
and I transfer it to both threads to be used there.
However, thread-2 sometimes fails to send PDUs using snmp.send(...);
What am I doing wrong?
Can anyone guide me as for how I should allocate the Snmp object so
it is good for both sending PDUs, and for receving traps?
Thanks,
Nefi

Hello,
I am writing a SNMP Manager that is supposed to do the following:
(1) Send snmp commands to snmp-agents, and handle thier response.
(2) receive snmp traps from snmp-agents.
I am using SNMP4J software package for writing the snmp manager.
I would like to use a SINGLE Snmp object (SNMP4J object) , both
for sending a snmp command and for receiving snmp traps.
SO far, I have written two separate programs:
*** Program 1:
** The first program only listens for Snmp trap-PDUs.
** Its main code is as follows:
     // configure Snmp object
     UdpAddress address = new UdpAddress("127.0.0.1/1990");
     TransportMapping transport = new DefaultUdpTransportMapping(address);
     Snmp snmp = new Snmp(transport);
     transport.listen();
     // handle received traps here
     CommandResponder trapPrinter = new CommandResponder() {
          public synchronized void processPdu(CommandResponderEvent e) {
               PDU command = e.getPdu();
               if (command != null) {
                    System.out.println(command.toString());
     snmp.addCommandResponder(trapPrinter);
*** Program 2:
** The second program sends GET PDUs, and its main code is as follows:
     // configure Snmp object
     UdpAddress targetAddress = new UdpAddress("127.0.0.1/1985");
     CommunityTarget target = new CommunityTarget();
     target.setCommunity(new OctetString("public"));
     target.setAddress(targetAddress);
     target.setRetries(2);
     target.setTimeout(10000); // was 1000 !!!
     target.setVersion(SnmpConstants.version1);
     Snmp snmp = new Snmp(new DefaultUdpTransportMapping());
     snmp.listen();
     // prepare the PDU for sending
     PDU command = new PDU();
     command.setType(PDU.GET);
     command.add(new VariableBinding(new OID("1.3.6.1.4.1.1331.11.5.1.0")));
     // now send the PDU
     ResponseEvent responseEvent = snmp.send(pdu, target);
     if (responseEvent != null)
          // response has arrived. handle it
     else
          System.out.println("null response received...");
I would like to unite these two programs into one, however, I cannot seem to
properly allocate one Snmp object to handle both the sending and receiving of PDUs.
I run two threads: thread-1 that does the listening for snmp traps,
and thread-2 which in charge of sending get/set PDUs.
I allocate the Snmp object in one place as follows:
     TransportMapping transport = new DefaultUdpTransportMapping(new UdpAddress("127.0.0.1/1990"));
     Snmp snmp = new Snmp(transport);
     snmp.listen();
and I transfer it to both threads to be used there.
However, thread-2 sometimes fails to send PDUs using snmp.send(...);
What am I doing wrong?
Can anyone guide me as for how I should allocate the Snmp object so
it is good for both sending PDUs, and for receving traps?
Thanks,
Nefi

SNMP management client

We are looking for information on SNMP management client that integrates
well with Forte. If anybody has done something with SNMP, I would like to
find out what you are using and how difficult was the process.
thanks in advance.
ka
Kamran Amin
Framework, Inc.
303 South Broadway
Tarrytown, NY 10591
(914) 631-8953x121
kamran.aminlendware.com
http://www.lendware.com/

Issue resolved.
If anyone has this problem again, the solution is in two parts:
(1) SNMPAgents do not respond to incorrectly configured requests so disable the security to permit testing. For the SNMPAgent all useful setting seem to reside in the SimpleAgent.xml file, so find the SNMP "version" and set it to "1". So far I haven't been able to find any documentation for this component.
File: C:\JavaCAPS51\emanager\server\monitor\snmpagent\config\SnmpAgent.xml
<properties
version="3" -- Change to 1, available options (1|2|3)
/>
All polling requests should work now.
(2) The "AdventNet SNMP Adaptor 5 MibBrowser" doesn’t appear to support SNMP v3 security fully, or in a way compatible with the SNMPAgent implementation. The "iReasoning MIB Browser" (Professional Edition only with v3 support) works fine. Judging by the log files the CAPS SNMPAgent uses the iReasoning SNMP API.

SNMP Manager on Mac

I see some threads on enabling SNMP agent on the Mac. However, that's not what I am after. What I want to know is if there is an SNMP Manager out there that will run on the Mac platform. There are plenty out there on Unix and Linux. However, are there any that will run on the Mac?
I'm basically trying to do SNMP Management of other routers and switches from my MiniMac.
TIA

Sorry about the link, but here's some expensive ones it linked to...
http://www.versiontracker.com/dyn/moreinfo/macosx/10204
http://www.versiontracker.com/dyn/moreinfo/macosx/31414
http://www.versiontracker.com/dyn/moreinfo/macosx/13036
Cheaper...
http://www.versiontracker.com/dyn/moreinfo/macosx/25095
Free...
http://www.versiontracker.com/dyn/moreinfo/macosx/11377
Not sure if any are what you need/want.

SNMP Manager/Monitoring

Hi,
what do I have to do to use SNMP for Weblogic? Do I need an extra SNMP
Manager? Which ones would you recommend? What must be the abilities of the
manager to use it for WebLogic? Must it be able to monitor the weblogic SNMP
objects? Or can I monitor all the information with my administration server?
Or can we use both ways? What would be the better one? If I need an extra
monitor? Which products are useful to monitor WebLogic?
Thanks,
Marita

Anything to do with email receiving from Network Devices is todo with SMTP forwarding.
Google / Look for SMTP configuration on MDS and hopefully there is alot on Cisco's site.
One link I found is : http://www.cisco.com/en/US/docs/switches/datacenter/mds9000/sw/4_1/configuration/guides/cli_4_1/call.html#wp1402579
Regards
Yasser

SNMP Manager

Hi all,
Which good (famous) SNMP manager (free and shareware) use to manage not only Cisco devices, but also other vendors?
Thanks

I would add:
Nagios (fault mgmt)
RANCID (configuration mgmt)
Cacti (performance mgmt)
PRTG (performance mgmt - paid version also available)
All are multivendor but require some more skills from the user to get the product setup and running. Remember - open source is free to acquire, but not free to operate and maintain.

Weblogic 7.0 and SNMP Management

Does anybody know of an SNMP manager that supports Weblogic 7.0?
All of them that I've found so far seem to support only
Weblogic 6.1
Thanks!

Wily Introscope will report WLS 7.0 metrics via its own SNMP MIB/Agent (it grabs
the WLS 7.0 metrics from JMX, then reports them from its own MIB).
We've done succesful integrations with BMC, HP OpenView, SiteScope, and more...
http://www.wilytech.com
Dave
"Raj" <[email protected]> wrote:
>
Does anybody know of an SNMP manager that supports Weblogic 7.0?
All of them that I've found so far seem to support only
Weblogic 6.1
Thanks!

SNMP Managed Object to Get/Set Current Transmit-Key of Aironet 1100 (WEP)

Hi,
I'd like to know what is snmp managed object to get/set default or current transmit-key of 4 WEP (encryption) keys...
Even though I took a good look at every snmp mibs related to cisco aironet 1100, I could not find it...
Please help me...
Thanks,
Bumjong

See if the following helps:
.1.3.6.1.4.1.522.3.6.1.3.1.3
awcDot11WEPDefaultKeyValue OBJECT-TYPE
-- FROM AWCVX-MIB
-- TEXTUAL CONVENTION WEPKeytype128
SYNTAX OCTET STRING (5..13)
MAX-ACCESS read-write
STATUS Current
DESCRIPTION "A WEP default secret key value. The value is
write-only (attempt to read will result in
return of a zero-length string)."

Configure WISM controller Vlan Management

Anyone can clarify me if is correct or not to confifure the WISM controller on a 6509 management in VLAN1 or is a must to put ( as Cisco Described : http://www.cisco.com/en/US/docs/wireless/technology/wism/technical/reference/appnote.html#wp40841 ) in VLAN 40 or any aother VLAN different by Vlan 1 ?
This question because now we found a broadcast storm passing through VLAN 1 and through the wirelles network
Thanks !

you an use whatever VLAN you wish. If all of your network is managed via VLAN 1, than that is fine. I know that some people recommend not using VLAN 1, but that is a personal call.

Snmp manager in java

Hello wise and helpful people!
I'm writting to get some very very important information for me.
Please read this post and answer as clearly as you can. I count on yours' kindness and understanding...
I have to write a java project for my studies.
It has to be a network devices' manager as an applet in java.
I can use some java Api to this task, so I searched java api in google.
Unfortunately my knowlegde about snmp and java is very weak, and I would like to ask you for help and answer some of my questions.
For example, I found AdventNet SNMP API 4, which seemd to be very suitable for me. Unfortunately, I read: "Due to the Java security restrictions, applets cannot directly communicate with SNMP agents. To overcome this, the SAS server can be used as a gateway between the applet (SAS client) and the agent." somewhere on this site " (http://snmp.adventnet.com/help/snmpapi/snmpv3/api_overview/sasapiarch.html)
What's the problem SAS server is only in the not-free package of advanet and so I can't afford it.
Do I understand well: Java applets cannot communicate via UDP with network devices, and there is no possibility to do so. It is necessary to have some server which translates TCP java commands into UDP SNMP commands?
Do You know some suitable and FREE sollution for my project?
It there any possibility to have java library, which would directly communicate with eg. router? Or do I have to have some serwer which will be some kind of "mediator" between java applet and network device? If yes, do you know some pair of library-serwer which is free?
I was searching on this forum with no positive effects for me, so I wrote this post.
Sorry for my English ;)
Please explain me this... I need you help!
Thanks,
David

if the applet is signed, it can do what you want. You may want to look at JMX. http://java.sun.com/products/JavaManagement/

SNMP management on AP350

I have configured SNMP, it is enabled and the RO community is set. But from the management machine, I try to send "gets" or "snmpwalk" to the AP350 and it doesn't respond.
Does anyone know what could be the problem?

Ok. Your suggestion fixed the problem. We needed a username with the community string and SNMP rights.
Regards.

SNMP Management of individual VPN Tunnels

Is there a way of indexing individual VPN Tunnels statically, through a VPN3000 concentrator?
If I MIB browse a VPN3000 concentrator, I can see the individual VPN tunnels each with ifindex numbers, so for the period this tunnel is active, I can collect performance statistics from it. The problem occurs when the connection from the same site is reset, the ifindex is renumbered which means I have to relearn the new ifindex in order to continue collecting information.
Is there a way around this, or is there another solution for getting traffic statistics from VPN tunnels between sites, via SNMP?

Since the if numbers change the best way to get your stats would be from the routers behind the vpn on either side. Then you can turn on ip accounting or use netflow on the routers. There is a free netflow collector @ www.ntop.org. I think this approach will work if you.
Hope this helps.

Cisco 2504 controller, setting management wlan interface Vlan Identifier to anything but 0 loses management ability

I have setting the Management Interface Vlan Identifier to 0 or untagged.
If i change this to a vlan, I am unable to manage the device, is this correct?
Steve

If u make it untagged then specify the NATIVE vlan on the switchport..
If u tag the management interface, then dont configure the native vlan on the switchport..
Both the cases u will be able to access!!
Lemme know if this answered ur question!!
Regards
Surendra

RVS4000 remote management using SNMP not Supported over WAN

I'm trying to mange the RVS4000 router from the WAN side. I just changed the default password and in the firewall setting:
Block WAN Request is disabled.
Remote Management is enabled with the default port.
But I am not able to connect to the router remotely (using its WAN IP address). I can ping its WAN IP address fine from the remote PC. The router functions normally (i.e. PC on the LAN can connect to the Internet) but the remote management via SNMP also does not work. In most cases, the router just does not respond to the TCP SYNC or SNMP request from the WAN. Occassionally, it responds to the TCP SYNC fine but when the remote PC requests the HTTP page, it quickly responds with FIN/ACK.
In addition, I can connect to its WAN IP address from the LAN side. But it just does not work from the WAN side.
I tried disabling firewall, IPS, etc, nothing works.
Message was edited by: Steve DiStefano

Shoot, I just tried it myself. Didnt work. I contacted development team and they told me it wasnt speced to operate for SNMP management (port 161) over the WAN.
Remote Mgmt on RVS4000 is limited to WebUI access on RVS4000, and SNMP is only accessible from LAN side.
This product did not have any requirement to be accessed from Internet using SNMP.
Very sorry I didnt know this. Was there a datasheet or paper that indicated this was supported I can correct to prevent this frpom happening to others like us?
You know, I was thnking that the times I used SNMP on SB Routeres was when I was VPNed into the router, then it works, since it is supported on LANB side. is that an option for you?
Tell us about what typs of things you view walking SNMP from the NOC and we'lls ee if there are alternative ways for you to get the same data.
Steve
SE Field Channel Sales
Message was edited by: Steve DiStefano

SNMP on CAPWAP via WCS or Cisco Prime

We are interested in adding SNMP settings to all of our CAPWAP wireless access points. There is no way to do this via any of our controllers or WCS. We are soon to upgrade to Cisco Prime.
I am able to log in via telnet to a 3502 and manually enter SNMP commands, however I can't save the running config to NVRAM. I can save the running config to flash, but can't change the config register to look at flash for the config on startup.
Is there a way to configure and save SNMP parameters on CAPWAP wireless access points?

The referenced document states that SNMP management is available. However, The SNMP settings on a controller (5508 as an example) allows for traps on the controller itself and not on the CAPWAPs.
We have an inventory management system that we want to import our CAPWAPs. There are over 2500 so manually imputing the CAPWAPs can be a tedious task. The management system uses SNMP to discover said info. All of the controllers are already cataloged.

Controller SNMP management

Similar Messages

Maybe you are looking for