For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bartek's avatar
Bartek
Icon for Cirrus rankCirrus
Apr 17, 2020

Source IP for SNMP traps

Hi Guys,

I can't find it anywhere - what is the source IP for SNMP traps when you configure the network to "Default"? I'm having a HA setup of two 12.1.5 devices.

4 Replies

  • Hello,

     

    What do you see under " show running-config sys snmp trap-source"

     

    F5 can use different outgoing interfaces to send snmp traps. You can even modify and configure source interface as per your requirement for snmp traps. Please refer below article.

     

    https://support.f5.com/csp/article/K91608713

     

    Hope it helps!

    Mayur

  • Did you try tcpdump to check source ip?

    tcpdump -i any -nn port snmp

    ​hope it will work for you..

  • The source is set to "default" in trap configuration - can't really find a definition of "default".

    Tcpdump was one of my first ideas, however hard to track the source when traps are not firing that often.

  •  ,

     

    Do you have any specific host route for SNMP server or is it using default route to reach it from F5? I think, unless SNMP server is a connected network, it would use the interface to go to server where the default route is pointed.

     

    Mayur