Specifications

14-2
System Management Software Configuration Guide for Cisco IE 2000U and Connected Grid Switches
Chapter 14 Configuring SNMP
Information About SNMP
An agent can send unsolicited traps to the manager. Traps are messages alerting the SNMP manager to
a condition on the network. Traps can mean improper user authentication, restarts, link status (up or
down), MAC address tracking, closing of a TCP connection, loss of connection to a neighbor, or other
significant events.
Although the switch does not support the Cisco Data Collection MIB, you can use the command-line
interface to periodically transfer selected MIB data to specified NMS stations. You can also configure a
Cisco Process MIB CPU threshold table.
This section includes the following topics:
• SNMP Versions, page 14-2
• SNMP Manager Functions, page 14-3
• SNMP Agent Functions, page 14-4
• SNMP Community Strings, page 14-4
• Using SNMP to Access MIB Variables, page 14-4
• SNMP Notifications, page 14-5
• SNMP ifIndex MIB Object Values, page 14-6
• MIB Data Collection and Transfer, page 14-6
SNMP Versions
This software release supports these SNMP versions:
• SNMPv1—The Simple Network Management Protocol, a Full Internet Standard, defined in
RFC 1157.
• SNMPv2C replaces the Party-based Administrative and Security Framework of SNMPv2Classic
with the community-string-based Administrative Framework of SNMPv2C while retaining the bulk
retrieval and improved error handling of SNMPv2Classic. It has these features:
– SNMPv2—Version 2 of the Simple Network Management Protocol, a Draft Internet Standard,
defined in RFCs 1902 through 1907.
– SNMPv2C—The community-string-based Administrative Framework for SNMPv2, an
Experimental Internet Protocol defined in RFC 1901.
• SNMPv3—Version 3 of the SNMP is an interoperable standards-based protocol defined in RFCs
2273 to 2275. SNMPv3 provides secure access to devices by authenticating and encrypting packets
over the network and includes these security features:
– Message integrity—ensuring that a packet was not tampered with in transit
– Authentication—determining that the message is from a valid source
– Encryption—mixing the contents of a package to prevent it from being read by an unauthorized
source.
Note To select encryption, enter the priv keyword. This keyword is available only when the
cryptographic (encrypted) software image is installed.
Both SNMPv1 and SNMPv2C use a community-based form of security. The community of managers
able to access the agent’s MIB is defined by an IP address access control list and password.