SNMP - Configuration

Overview

The following are the high level steps for configuring SNMP. Each procedure is detailed below.

• Configure KNI Interface at both hub and spoke SSRs

• Enable SNMP Server in Router System Settings at both hub and spoke SSRs

• Configure Global Services: snmp (polling) and snmp-trap

  • A unique Service for snmp polling for every hub and spoke SSR
  • One common Service snmp-trap

• Configure Service Routes at both hub and spoke SSRs

Configuration

The procedures below use the GUI to create the configuration, and assume the following:

• The SNMP Manager is located behind the hub SSR
• Both spoke and hub SSRs are not located behind any firewall or NAT devices

Configure the KNI Interface

For additional information about the configuration of KNI interfaces, see Kernel Network Interfaces.

1. From the Authority, navigate to the Router > Node > Device Interface.

2. Under the Device Interface, click ADD.

3. In the New Device Interface pane, enter a name for the device interface.

4. Set the Device interface type as Host.

5. Scroll down to Network Interfaces. Click on ADD to add a new network interface for the SNMP device interface.

6. Enter snmp as the name of the network interface and click SAVE.

7. Under Management Traffic Settings, define a dedicated management vector. This vector should be associated with the management interface.

• Enter the name
• Set the priority to 100
• Enable a default route

8. Scroll down to Interface Addresses, click ADD and enter the IP address of the network interface and click SAVE.

9. Configure the KNI IP subnet. Every SSR running SNMP must be configured with a unique, routable IP subnet. Choosing /30 maximizes the number of subnets in a chosen IP block.

It is important that this address is specified as the address to be polled by the SNMP Manager. The Gateway IP address is also used by the SSR to automatically create an interface at the Linux level later in this procedure.

10. Under Host Services, click ADD.

11. Under Service Type, select snmp-server.

12. Under Access Policies, click add, and enter the IP address for the SNMP manager.

Configure Router System Settings

Return to the Router level, and scroll down to the Router Settings.

1. Click the System Settings button.
2. Scroll down to the SNMP Server Settings and Enable the SNMP Server.

3. Under SNMP Notification Receivers, click ADD, enter the IP address of the SNMP Manager, and set the Notification Type to trap.

4. Return to the router system settings, scroll down to the SNMP Access Control Policies and click ADD.
5. Enter the management as the new Access Control Policy name and click SAVE.

6. In the SNMP Access Control Policies pane, enter the Permitted Client Host IP address.

7. Click Validate, then Commit.

A new interface is created at the Linux level bearing the same name and gateway IP of the snmp interface created earlier. The gateway IP is the address that the SNMP Manager will be polling.

Configure Global Services

At the Authority Level, scroll down to Services, and click ADD.

1. Enter a name for the new service; in this case, the service name is snmp-<SSR-name>. Create a service for each SSR. This service is used for polling of individual SSRs.

2. In the Basic Information panel, verify that the Share Service Routes toggle is set to true (default).

3. Scroll down to Policies, and set the Security Policy to internal. (Is there no need to configure a Service Policy?)

4. Scroll back up to Service Addresses and enter the KNI Subnet for the SSR configured in step 9 of the KNI Interface process.

Configure the SNMP-trap

Return to the Authority level, scroll down to Services, and click ADD.

1. Name the service snmp-trap. This service is used for traps from all SSRs.

2. In the Basic Information panel, verify that the Share Service Routes toggle is set to true (default).

3. Scroll down to Policies, and set the Security Policy to internal.

4. Scroll back up to Service Addresses, click ADD, and enter the IP address of the SNMP manager.

5. Click Validate, then Commit.

Configure the SNMP Service Routes

The SNMP Service routes are used for polling each SSR by the SNMP manager.

SNMP Service Route

This procedure creates the service route used for SNMP polling, and must be repeated at each SSR to be polled by the SNMP Manager.

1. From the Authority level, select the router.
2. Scroll down to Service Routes and click ADD.
3. Enter the New Service Route name; snmp and click SAVE.
4. In the Service route Information pane, choose the snmp-<service-name> service name created earlier.

5. Under Service Route Type, select Use Learned Routes from the drop down.

6. Click Validate, then Commit.

Return to the Router level, and select the Hub SSR. You can see the service route is automatically generated at the SNMP Manager.

SNMP-trap Service Route

1. From the Router level, and select Service Routes.
2. Click ADD.
3. Enter a new Service Route name, snmp-trap and click SAVE.

4. In the Service route Information pane, choose the snmp-trap service route created earlier.

5. Under Service Route Type, select Use Learned Routes from the drop down.

6. Click Validate, then Commit.

Return to the Router level, and select the Spoke SSR. You can see the service route is automatically generated where the snmp traps are generated.