Cisco FirePOWER ASA 5500 series User Manual

42-3
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Chapter 42 Monitoring the Security Appliance
Using SNMP
Enabling SNMP
The SNMP agent that runs on the security appliance performs two functions:
• Replies to SNMP requests from NMSs.
• Sends traps (event notifications) to NMSs.
To enable the SNMP agent and identify an NMS that can connect to the security appliance, follow these
steps:
Step 1 Ensure that the SNMP server on the security appliance is enabled by entering the following command:
hostname(config)# snmp-server enable
The SNMP server is enabled by default.
Step 2 To identify the IP address of the NMS that can connect to the security appliance, enter the following
command:
hostname(config)# snmp-server host interface_name ip_address [trap | poll] [community
text] [version 1 | 2c] [udp-port port]
Specify trap or poll if you want to limit the NMS to receiving traps only or browsing (polling) only. By
default, the NMS can use both functions.
SNMP traps are sent on UDP port 162 by default. You can change the port number using the udp-port
keyword.
Step 3 To specify the community string, enter the following command:
hostname(config)# snmp-server community key
The SNMP community string is a shared secret between the security appliance and the NMS. The key is
a case-sensitive value up to 32 characters in length. Spaces are not permitted.
Step 4 (Optional) To set the SNMP server location or contact information, enter the following command:
Cisco Firewall MIB The security appliance supports browsing of the following groups:
• cfwSystem
The information is cfwSystem.cfwStatus, which relates to failover
status, pertains to the entire device and not just a single context.
Cisco Memory Pool MIB The security appliance supports browsing of the following table:
• ciscoMemoryPoolTable—The memory usage described in this table
applies only to the security appliance general-purpose processor, and
not to the network processors.
Cisco Process MIB The security appliance supports browsing of the following table:
• cpmCPUTotalTable
Cisco Syslog MIB The security appliance supports the following trap:
• clogMessageGenerated
You cannot browse this MIB.
Table 42-1 SNMP MIB and Trap Support (continued)
MIB or Trap Support Description

Cisco FirePOWER ASA 5500 series Specifications

General

Brand	Cisco
Model	FirePOWER ASA 5500 series
Category	Firewall
Language	English