Monitor SNMP Trap
The Monitor SNMP Trap object waits
for an event to occur either in the Microsoft SNMP Trap Service, or
on a port that you specify. Using filters, you can trigger your
Policies according to the device that raised the event or the
enterprise, generic, or specific identifiers of the SNMP
trap.
To configure SNMP version 3 security
(if you are not using the Microsoft SNMP Trap Service), use the
SNMP
Options in the Client (click the
Options menu and select
SNMP).
How it is used
Use the Monitor SNMP Trap object to
monitor a network device for critical errors and automatically
create a trouble ticket and perform level 1 diagnostics on the
device.
Configuration
To configure the Monitor SNMP Trap
object you need to know the version of SNMP that you are using, the
source host IP address, the enterprise identifier of the device,
and the generic or specific identifier of the device that you are
monitoring.
Details Tab
Microsoft SNMP Trap Service
(SNMPv1, SNMPv2c)
|
Select this option to use the
Microsoft SNMP Trap Service. This service is only compatible with
SNMP versions SNMPv1 and SNMPv2c.
|
No dependency (SNMPv1, SNMPv2c,
SNMPv3)
|
Select this option to monitor
SNMP traps using a port rather than the Microsoft SNMP Trap
Service.
|
Port
|
If you select the No dependency option, type the number
of the communication port that will be monitored for SNMP traps. If
you select port 162, the Microsoft SNMP Trap Service must be
disabled because it uses the same port when it runs.
|
Source host
|
Select to specify the IP address
of the device where the event originates.
|
Enterprise identifier
|
Select to specify the enterprise
identifier of the event raised by the device.
|
Generic identifier
|
Select to specify the generic
identifier of the SNMP trap. There are six options available:
•
|
coldStart(0) – Select to filter for a cold start of
the network device. This option has a numerical value of 0.
|
•
|
warmStart(1) – Select to filter for a warm start of
the network device. This option has a numerical value of 1.
|
•
|
linkDown(2) – Select to filter for a severed
connection to the network device. This option has a numerical value
of 2.
|
•
|
linkUp(3) – Select to filter for a re-established
connection to the network device. This option has a numerical value
of 3.
|
•
|
authenticationFailure(4) – Select to filter for a
failed SNMP authentications to the network device. This option has
a numerical value of 4.
|
•
|
egpNeighborLoss(5) – Select to filter for a lost
connection to an EGP neighbor. This option has a numerical value of
5.
|
•
|
enterpriseSpecific(6) – Select to filter based on
an enterprise specific id. This option has a numerical value of 6.
You must specify this option to filter based on a Specific
identifier.
|
|
Specific identifier
|
Select to specify an enterprise
specific identifier for the SNMP trap. This field becomes active
when you select the enterpriseSpecific(6) option of the Generic identifier field (above).
|
Advanced Tab
Objects that you add to the
Object identifiers list
become Published Data items when a matching object is found on the
Details tab.
Note: The Monitor SNMP Trap object
launches even if there are no objects in this list, or if the
objects do not correspond to the variable bindings reported by the
SNMP trap. This list is used only to create new Published Data
items.
To add objects:
1.
|
Click Add. The Add object identifier filter dialog
appears.
|
2.
|
In the OID field, type the object ID
number.
|
3.
|
Click OK. The object appears in the
list.
|
Available Published Data
Name
|
Description
|
Source IP address
|
The IP address of the device
where the trap originated.
|
Enterprise Id
|
The enterprise Id of the
trap.
|
Generic Id
|
The generic Id of the
trap.
|
Specific Id
|
The specific Id of the trap. The
value of the specific identifier is returned when using the
enterpriseSpecific(6) option of the
Generic identifier field. Otherwise, a value of 0 (zero) is
returned.
|
Trap port
|
The port where the trap was
received.
|
Varbind count
|
The number of variable bindings
received.
|
SNMP Version
|
The SNMP version that was
specified for this trap.
|
In addition to
these Published Data items, objects that you added to the
Object
identifiers list on the
Advanced
tab become Published Data items when they match
an object found on the
Details
tab.