SNMP config on ISE

[Srinivasan Nagarajan]

Hi Experts,

We're running ISE V2.7 and would like to migrate V2C to V3. Below is the current configuration on the ISE.

Can you please suggest if only the traps are configured as per below or polling+traps are also configured.

Not able to infer. Please assist. Thanks in advance.

snmp-server enable
snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>
snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>
snmp-server community <STRING> ro
snmp-server engineID <ISE SERIAL NUMBER>

[Mohammed al Baqari · Accepted solution]

Hi,

The config has traps configured. Regarding polling, this is configured from
the NMS server. The community string is configured which is enough for
polling to be configured on NMS.

**** please remember to rate useful posts

[Srinivasan Nagarajan]

Hi @Mohammed al Baqari 

Thanks for the reply.

Our plan is to migrate to SNMP V3 from SNMP V2C for polling but the traps continues to work on 2C (Client requirement). Technically, is it possible and if yes, how the config would look like.

Can you please suggest 

[balaji.bandi]

You can use both v3 and v3 i guess here.

v3 config looks as below for NMS to poll ISE node.

snmp-server user SNMPv3USER v3 plain authpassword passwordhere

snmp-server host Y.Y.Y.Y  version 3 SNMPv3USER XXXXXXXXXXXXXXXXXXXXXX authpassword password her

hope this help you.

[Srinivasan Nagarajan]

Hi Balaji,

Thanks for looking into this.

From the reply, assuming it's typo, I believe V2C for traps and V3 for polling would work and it'd look like below.

Please correct me if i'm wrong ?

Polling: 

snmp-server user SNMPv3USER v3 plain authpassword privpassword

Traps:

 snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>
snmp-server host X.X.X.X version 2c <SNMPCOMMUNITYSTRING>

snmp-server community <STRING> ro

[Mohammed al Baqari]

Hi,

Yes, you are right. This will allow poll with v3 and traps with v2

**** please remember to rate useful posts

[balaji.bandi]

yes you can combination - not seen any issue here, hope that helps you.