
32-3
Cisco Security Appliance Command Line Configuration Guide
OL-6721-01
Chapter 32 Monitoring and Troubleshooting
Monitoring the Security Appliance
Enabling SNMP
The SNMP agent that runs on the security appliance performs two functions:
• Replies to SNMP requests from NMSs.
• Sends traps (event notifications) to NMSs.
To enable the SNMP agent and identify an NMS that can connect to the security appliance, follow these
steps:
Step 1 To identify the IP address of the NMS that can connect to the security appliance, enter the following
command:
hostname(config)# snmp-server host
interface_name ip_address
[trap | poll] [community
text
] [version
1
|
2c
] [udp-port
port
]
Specify trap or poll if you want to limit the NMS to receiving traps only or browsing (polling) only. By
default, the NMS can use both functions.
SNMP traps are sent on UDP port 162 by default. You can change the port number using the udp-port
keyword.
Step 2 To specify the community string, enter the following command:
hostname(config)# snmp-server community
key
The SNMP community string is a shared secret between the security appliance and the NMS. The key is
a case-sensitive value up to 32 characters in length. Spaces are not permitted.
Step 3 (Optional) To set the SNMP server location or contact information, enter the following command:
hostname(config)# snmp-server {contact | location}
text
Step 4 To enable the security appliance to send traps to the NMS, enter the following command:
hostname(config)# snmp-server enable [traps [all |
feature
[
trap1
] [
trap2
]] [...]]
Cisco Firewall MIB The security appliance supports browsing of the following groups:
• cfwSystem
The information is cfwSystem.cfwStatus, which relates to failover
status, pertains to the entire device and not just a single context.
Cisco Memory Pool MIB The security appliance supports browsing of the following table:
• ciscoMemoryPoolTable—The memory usage described in this table
applies only to the security appliance general-purpose processor, and
not to the network processors.
Cisco Process MIB The security appliance supports browsing of the following table:
• cpmCPUTotalTable
Cisco Syslog MIB The security appliance supports the following trap:
• clogMessageGenerated
You cannot browse this MIB.
Table 32-1 SNMP MIB and Trap Support (continued)
MIB or Trap Support Description
Kommentare zu diesen Handbüchern