For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bartek's avatar
Bartek
Icon for Cirrus rankCirrus
Apr 17, 2020

Source IP for SNMP traps

Hi Guys,

I can't find it anywhere - what is the source IP for SNMP traps when you configure the network to "Default"? I'm having a HA setup of two 12.1.5 devices.

application delivery
BIG-IP
snmp

4 Replies

  • Mayur_Sutare's avatar
    Mayur_Sutare
    Icon for MVP rankMVP
    Apr 18, 2020

    Hello,

     

    What do you see under " show running-config sys snmp trap-source"

     

    F5 can use different outgoing interfaces to send snmp traps. You can even modify and configure source interface as per your requirement for snmp traps. Please refer below article.

     

    https://support.f5.com/csp/article/K91608713

     

    Hope it helps!

    Mayur

  • Samir's avatar
    Samir
    Icon for MVP rankMVP
    Apr 18, 2020

    Did you try tcpdump to check source ip?

    ​

    tcpdump -i any -nn port snmp

    ​

    ​hope it will work for you..

  • Bartek's avatar
    Bartek
    Icon for Cirrus rankCirrus
    Apr 20, 2020

    The source is set to "default" in trap configuration - can't really find a definition of "default".

    Tcpdump was one of my first ideas, however hard to track the source when traps are not firing that often.

  • Mayur_Sutare's avatar
    Mayur_Sutare
    Icon for MVP rankMVP
    Apr 20, 2020

     ,

     

    Do you have any specific host route for SNMP server or is it using default route to reach it from F5? I think, unless SNMP server is a connected network, it would use the interface to go to server where the default route is pointed.

     

    Mayur