Chapter 7 Configuring Snmp; Information About Snmp - Cisco 4700M Administration Manual

Configuring SNMP
This chapter describes how to configure Simple Network Management Protocol (SNMP) to query the
Cisco 4700 Series Application Control Engine (ACE) appliance for Cisco Management Information
Bases (MIBs) and to send event notifications to a network management system (NMS).
This chapter contains the following major sections:
•
•
•
•
•

Information About SNMP

SNMP is an application-layer protocol that facilitates the exchange of management information between
an NMS, SNMP agents, and managed devices such as the ACE. You can configure the ACE to send traps
(event notifications) to an NMS, or you can use the NMS to browse the MIBs that reside on the ACE.
The ACE contains an SNMP agent that provides support for network monitoring. The ACE supports
SNMP Version 1 (SNMPv1), SNMP Version 2c (SNMPv2c), and SNMP Version 3 (SNMPv3).
SNMPv1 and SNMPv2c use a community string match for authentication. Community strings provide a
weaker form of access control. SNMPv3 utilizes an SNMP user for authentication and provides
improved access control by using strong authentication. SNMPv3 should be utilized instead of SNMPv1
and SNMPv2c wherever possible.
SNMPv3 is an interoperable standards-based protocol for network management. SNMPv3 provides
secure access to devices by using a combination of authenticating and encrypting frames over the
network. The SNMPv3 provides the following security features:
•
•
•
OL-20823-01
Information About SNMP
Default Settings for SNMP
Configuring SNMP
Displaying or Clearing SNMP and Service Policy Statistics
Example of an SNMP Configuration
Message integrity—Ensures that a packet has not been tampered with in-transit.
Authentication—Determines that the message is from a valid source.
Encryption—Scrambles the packet contents to prevent it from being seen by unauthorized sources.
Cisco 4700 Series Application Control Engine Appliance Administration Guide
7
C H A P T E R
7-1