Cisco FirePOWER ASA 5500 series Configuration Manual page 802

Using SNMP
hostname(config)# snmp-server {contact | location} text
To enable the security appliance to send traps to the NMS, enter the following command:
Step 5
hostname(config)# snmp-server enable traps [all | syslog | snmp [trap] [...] |
entity [trap] [...] | ipsec [trap] [...] | remote-access [trap]]
Enter this command for each feature type to enable individual traps or sets of traps, or enter the all
keyword to enable all traps.
The default configuration has all snmp traps enabled (snmp-server enable traps snmp authentication
linkup linkdown coldstart). You can disable these traps using the no form of this command with the
snmp keyword. However, the clear configure snmp-server command restores the default enabling of
SNMP traps.
If you enter this command and do not specify a trap type, then the default is syslog. (The default snmp
traps continue to be enabled along with the syslog trap.)
Traps for snmp include:
• authentication
• linkup
linkdown
•
coldstart
•
Traps for entity include:
config-change
•
fru-insert
•
fru-remove
•
Traps for ipsec include:
• start
• stop
Traps for remote-access include:
session-threshold-exceeded
•
To enable system messages to be sent as traps to the NMS, enter the following command:
Step 6
hostname(config)# logging history level
You must also enable syslog traps using the preceding snmp-server enable traps command.
To enable logging, so system messages are generated and can then be sent to an NMS, enter the following
Step 7
command:
hostname(config)# logging enable
The following example sets the security appliance to receive requests from host 192.168.3.2 on the inside
interface.
hostname(config)# snmp-server host 192.168.3.2
hostname(config)# snmp-server location building 42
hostname(config)# snmp-server contact Pat lee
hostname(config)# snmp-server community ohwhatakeyisthee
Cisco Security Appliance Command Line Configuration Guide
42-4
Chapter 42 Monitoring the Security Appliance
OL-10088-01