How to Configure SNMP for Cisco devices

 

Most network devices now support snmp, which can be used for better O & M, such as cisco switches and routers. The specific configuration methods are shared below.

 

1. Configure the SNMP proxy for the Cisco device:

# Snmp-server community public ro configure the read-only string of this vro as public

# Snmp-server community public rw: Set the read/write string of the vro to public.

# Snmp-server enable traps allow routers to send all types of SNMP traps

# Snmp-server host IP-address traps trapbhodc specifies the receiver IP address of the SNMP Trap on the router. trapbjodc is used as the string when sending the Trap.

# Snmp-server trap-source loopback0 uses the IP address of the loopback interface as the sending source Address of the SNMP Trap

2. Configure the SNMP proxy for the Cisco device:

Enable SNMP:

# Snmp-server community public rw/ro

# End

 

Enable trap:

# Configure terminal

# Snmp-server enable traps snmp authentication

# End

 

Configure snmp

# Conf t

# Snmp-server community cisco ro (read-only) configure a read-only communication string

# Snmp-server community secret rw (read/write) configuration read/write communication string

# Snmp-server enable traps configure gateway SNMP TRAP

# Snmp-server host 10.254.190.1 rw configure gateway workstation address

 

If you do not need SNMP, you 'd better cancel it. If you want to use SNMP, you 'd better configure the Cisco router correctly. However, if you must use SNMP, You can protect it. First, SNMP has two modes: Read-only mode (RO) and read/write mode (RW ). If possible, the read-only mode can be used to control user operations to the maximum extent. Even if an attacker finds a character string in the communication, it can also restrict the purpose of using SNMP for reconnaissance, it also prevents attackers from using it to modify configurations. If you must use the read/write mode, it is best to distinguish the read-only mode from the communication string used in the read/write mode. You can use the access control list to restrict SNMP users.

From: blog of heiying kiddies