For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aquib_156189's avatar
Aquib_156189
Icon for Nimbostratus rankNimbostratus
May 27, 2014

SNMP Configuration

Can anyone help me for SNMP configuration in F5.

 

6 Replies

  • do you have any specific question? what problem are you facing?

     

  • Hello, I am configuring BIG IP as per below steps but SNMP server is not getting any information about my BIG IP.

     

    To allow monitoring of the SNMP agent 1.On the Main tab of the navigation pane, expand Network, and click Self IPs. The Self IPs screen opens.

     

    2.If you have not configured the self IP address that you will use for monitoring the SNMP agent, click the Create button. Otherwise, in the IP Address column, click a self IP address.

     

    3.From the Port Lockdown menu, select Allow Custom. This displays the Custom List setting.

     

    4.Click UDP.

     

    5.Click Port, and in the box, type 161 (the well-known port number for SNMP).

     

    6.Click Add. The port number appears in the UDP box.

     

    7.Click Finished or Update.

     

    To grant community access to SNMP data (v1 or v2c only) 1.On the Main tab of the navigation pane, expand System, and click SNMP. This opens the SNMP Agent Configuration screen.

     

    2.From the Agent menu, choose Access (v1, v2c). This displays the SNMP Access screen.

     

    3.In the upper-right corner of the screen, click Create. This displays the New Access Record screen.

     

    4.Select the type of address to which the access record applies, either IPv4 or IPv6.

     

    5.In the Community box, type the name of the SNMP community for which you are assigning an access level (in step 8).

     

    6.In the Source box, type the source IP address.

     

    7.In the OID box, type the OID for the top-most node of the SNMP tree to which the access applies.

     

    8.For the Access setting, select an access level, either Read Only or Read/Write. (This access level applies to the community name you specified in step 5.)

     

    9.Click Finished.

     

    • Nath's avatar
      Nath
      Icon for Cirrostratus rankCirrostratus
      Hi Am I going to input localhost or ip address of f5? As checking in cli via snmpwalk localhost is working and not the ip of f5.
  • Can you ping the BIG-IP from your SNMP server? If so, then it could be a firewall or other access control somewhere preventing the UDP 161 traffic from reaching your BIG-IP. You can try running a tcpdump and capturing SNMP traffic on your BIG-IP:

     

    tcpdump -nni 0.0:n -s0 host and port 161

     

  • Yes I can ping SNMP server and SNMP sever team also ping us, In Firewall end currently nothing is blocking, any to any permitted. Can you confirm me that my configuration is correct ? If it is wrong can you provide correct step by step configuration. It will too good if you can provide us command line (CLI) configuration.

     

    Thanks

     

  • If you've followed the guide, then it sounds like you have the proper SNMP configuration in place on the BIG-IP. Does the packet capture show that SNMP packets are arriving at the BIG-IP? If so, is the BIG-IP responding?