SNMP Configuration on the Core Switch

Enable SNMP on your core switch using SNMPv2c or SNMPv3 with secure community strings, ACLs, and trap settings for monitoring and management.

Step 1: Access the Switch CLI

Connect to the switch via SSH (recommended for security) or a console cable. Enter privileged EXEC mode:

Switch> enable

Then enter global configuration mode:

Switch# configure terminal

Step 2: Configure SNMP Version and Community Strings

For SNMPv2c, define community strings for read-only and read-write access:

Switch(config)# snmp-server community READONLY_STRING ROSwitch(config)# snmp-server community READWRITE_STRING RW

Replace READONLY_STRING and READWRITE_STRING with strong, unpredictable passwords. Restrict access using an ACL:

Switch(config)# access-list 10 permit 192.168.1.100Switch(config)# snmp-server community READONLY_STRING RO 10

This ensures only the specified host (e.g., SNMP management server) can query the switch . For SNMPv3 (recommended for stronger security), create a user with authentication and encryption:

Switch(config)# snmp-server group MYGROUP v3 privSwitch(config)# snmp-server user MYUSER MYGROUP v3 auth sha AUTH_PASSWORD priv aes 128 PRIV_PASSWORD

Step 3: Configure SNMP Traps

Traps notify the management server of events like interface changes or configuration updates:

Switch(config)# snmp-server host 192.168.1.100 version 2c READONLY_STRINGSwitch(config)# snmp-server enable traps

You can specify particular trap types if needed:

Switch(config)# snmp-server enable traps snmp linkup linkdown

Step 4: Optional Identification Information

Provide device location and contact info for easier management:

Switch(config)# snmp-server location "Data Center Rack 3"Switch(config)# snmp-server contact "[email protected]"

Step 5: Save Configuration

Ensure the SNMP configuration persists after a reboot:

Switch# write memory

Best Practices

• Prefer SNMPv3 over v2c for authentication and encryption .
• Use strong, unpredictable community strings.
• Restrict SNMP access with ACLs to only trusted management hosts.
• Enable only necessary traps to reduce unnecessary network traffic.
• Verify SNMP functionality using your network management system (e.g., PRTG, SolarWinds, Cisco Prime), . This configuration allows your core switch to be securely monitored and managed while minimizing exposure to unauthorized access.