Contents

Introduction

Prerequisites

Requirements

Components Used

Configure (Prime Infrastructure 2.2 and Earlier)

SNMP v2 Configuration on a Switch

GUI

CLI

SNMP v3 Configuration on a Switch

CLI

Prime Infrastructure

SNMP v2

SNMP v3

Configure (Prime Infrastructure 3.x and Later)

SNMP Configuration on a Switch (Denali 16.x)

GUI

GUI SNMP v2 Configuration on a Switch (Denali 16.x)

CLI SNMP v2 Configuration on a Switch (Denali 16.x)

GUI SNMP v3 Configuration on a Switch (Denali 16.x)

CLI SNMP v3 Configuration on a Switch (Denali 16.x)

Prime Infrastructure

SNMP v2

SNMP v3

Verify

SNMP v2 Configuration on a Switch (Cisco IOS-XE)

SNMP v3 Configuration on a Switch (Cisco IOS-XE)

Prime Infrastructure (2.2 and Earlier)

SNMP v2 Configuration on a Switch (Denali 16.x)

SNMP v3 Configuration on a Switch (Denali 16.x)

Prime Infrastructure

Troubleshoot

From Converged Access

From Prime Infrastructure

Introduction

This document describes how to add Converged Access (5760/3850/3650) to Prime Infrastructure with Simple Network Management Protocol (SNMP) v2 and v3.

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics:

- Converged Access (5760/3850/3650) Cisco IOS® Version 3.3.x and later or Denali 16.x

- Prime Infrastructure Version 2.0 or later

Components Used

This document is not restricted to specific software and hardware versions.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Configure (Prime Infrastructure 2.2 and Earlier)

SNMP v2 Configuration on a Switch

GUI

Choose Configuration > Controller > Management > SNMP > Communities > New.

CLI

Enter these commands:

conf t

snmp-server community V2Community RW

SNMP v3 Configuration on a Switch

CLI

Enter these commands:

conf t

snmp-server group V3Group v3 auth read V3Read write V3Write

snmp-server user V3User V3Group v3 auth sha Password1 priv aes 128 Password1

snmp-server view V3Read iso included

snmp-server view V3Write iso included

snmp-server host 10.201.234.170 version 3 auth V3User

snmp-server enable traps

Prime Infrastructure

Note: Use the Lifecycle view.

Choose Operate > Device Work Center > Add Device.

SNMP v2

SNMP v3

Note: If Telnet/Secure Shell parameters are not entered, Prime Infrastructure will not collect inventory from the switch.

Configure (Prime Infrastructure 3.x and Later)

SNMP Configuration on a Switch (Denali 16.x)

GUI

Choose General Settings > Management > SNMP.

Enable SNMP.

GUI SNMP v2 Configuration on a Switch (Denali 16.x)

CLI SNMP v2 Configuration on a Switch (Denali 16.x)

Enter these commands:

conf t

snmp-server community V2Community RW

GUI SNMP v3 Configuration on a Switch (Denali 16.x)

CLI SNMP v3 Configuration on a Switch (Denali 16.x)

Enter these commands:

conf t

snmp-server user V3user V3Group v3 auth sha Password1 priv aes 128 Password1

snmp-server view V3Read iso included

snmp-server view V3Write iso included

snmp-server host 10.201.236.107 version 3 auth V3user

snmp-server enable traps

Prime Infrastructure

SNMP v2

SNMP v3

Verify

Use this section to confirm that your configuration works properly.

The Cisco CLI Analyzer (registered customers only) supports certain show commands. Use the Cisco CLI Analyzer in order to view an analysis of show command output.

SNMP v2 Configuration on a Switch (Cisco IOS-XE)

Enter this command:

5760-79b#show snmp community

Community name: V2Community

Community Index: V2Community

Community SecurityName: V2Community

storage-type: nonvolatile        active

SNMP v3 Configuration on a Switch (Cisco IOS-XE)

Enter these commands:

5760-79b#show snmp user

User name: V3User

Engine ID: 80000009030068BC0C5A8F80

storage-type: nonvolatile        active

Authentication Protocol: SHA

Privacy Protocol: AES128

Group-name: V3Group

5760-79b#show snmp group

groupname: V3Group                          security model:v3 auth

contextname: <no context specified>         storage-type: nonvolatile

readview : V3Read                           writeview: V3Write

notifyview: <no notifyview specified>

row status: active

Note: The CLI is preferred over the GUI for SNMP v3 configuration on Converged Access for some known issues that are addressed in Cisco bug ID CSCuo52406.

Prime Infrastructure (2.2 and Earlier)

SNMP v2 Configuration on a Switch (Denali 16.x)

Enter this command:

polaris-3850#show snmp community

Community name: v2community

Community Index: v2community

Community SecurityName: v2community

storage-type: nonvolatile     active

SNMP v3 Configuration on a Switch (Denali 16.x)

Enter these commands:

polaris-3850#show snmp user

User name: v3user

Engine ID: 80000009030068BC0C5A8F80

storage-type: nonvolatile        active

Authentication Protocol: SHA

Privacy Protocol: AES128

Group-name: V3Group

polaris-3850#show snmp group

groupname: V3Group                          security model:v3 auth

contextname: <no context specified>         storage-type: nonvolatile

readview : V3Read                           writeview: V3Write

notifyview: <no notifyview specified>

row status: active

Prime Infrastructure

Troubleshoot

This section provides information you can use to troubleshoot your configuration.

From Converged Access

The show logging command shows active packets sent to the Prime Infrastructure IP address from the WLC.

Enter these commands:

polaris-3850#debug snmp packets

Polaris-3850#show logging

entPhysicalEntry.7.2042 = Gi2/0/1

*Jun 10 15:58:51.817: SNMP: Packet sent via UDP to 10.201.236.107

*Jun 10 15:58:51.819: SNMP: Packet received via UDP from 10.201.236.107 on Vlan1105

*Jun 10 15:58:51.825: SNMP: Get-bulk request, reqid 945449769, nonrptr 0, maxreps 10

Jun 10 15:58:51.904: SNMP: Packet sent via UDP to 10.201.236.107

*Jun 10 15:58:51.927: SNMP: Packet received via UDP from 10.201.236.107 on Vlan1105

*Jun 10 15:58:51.928: SNMP: Get-bulk request, reqid 945449775, nonrptr 0, maxreps 10

entPhysicalEntry.7.2062 = NULL TYPE/VALUE

*Jun 10 15:58:51.931: SNMP: Response, reqid 945449775, errstat 0, erridx 0

entPhysicalEntry.7.2063 = Gi2/0/22

entPhysicalEntry.7.2064 = Gi2/0/23

entPhysicalEntry.7.2065 = Gi2/0/24

entPhysicalEntry.7.2066 = Switch 2 FRU Uplink Module 1

--More--          entPhysicalEntry.7.2067 = Gi2/1/1 Container

entPhysicalEntry.7.2068 = Gi2/1/2 Container

entPhysicalEntry.7.2069 = Te2/1/3 Container

entPhysicalEntry.7.2070 = Te2/1/4 Container

entPhysicalEntry.8.1 = V01

*Jun 10 15:58:51.951: SNMP: Packet sent via UDP to 10.201.236.107

*Jun 10 15:58:51.974: SNMP: Packet received via UDP from 10.201.236.107 on Vlan1105

*Jun 10 15:58:51.975: SNMP: Get-bulk request, reqid 945449777, nonrptr 0, maxreps 10

ciscoEnvMonTemperatureStatusEntry.3 = NULL TYPE/VALUE

*Jun 10 15:58:51.978: SNMP: Response, reqid 945449777, errstat 0, erridx 0

ciscoEnvMonTemperatureStatusEntry.3.2008 = 28

ciscoEnvMonTemperatureStatusEntry.3.2009 = 40

ciscoEnvMonTemperatureStatusEntry.3.2010 = 44

ciscoEnvMonTemperatureStatusEntry.6.2008 = 1

--More--         *Jun 10 15:58:52.001: SNMP: Packet sent via UDP to 10.201.236.107

From Prime Infrastructure

SNMPWALK between devices.

Enter these commands:

PrimeInfrastructurejoker/admin# shell

Enter shell access password :

Starting bash shell ...

ade # snmpwalk -v2c -c v2community 10.201.234.36 sysUpTime

DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (238833753) 27 days, 15:25:37.53

v2community = snmp community

10.201.234.36 = WLC IP

This is the result if reachablity is there:

DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: xx.xxx