1. Enable SNMP on the Desired VRF
Begin by enabling SNMP on the Virtual Routing and Forwarding (VRF) instance that corresponds to the interface through which Auvik will communicate with the switch.
switch(config)# snmp-server vrf mgmt
Replace mgmt with the appropriate VRF name if you're using a different VRF.
2. Configure either SNMPv2c or SNMPv3
a. Configure SNMPv2c (Community-Based Access)
If you choose to use SNMPv2c, set a community string that Auvik will use to access the switch's SNMP data:
switch(config)# snmp-server community AuvikReadOnly
Replace AuvikReadOnly with a community string of your choice. Ensure that this string is configured in Auvik's SNMP credentials.
b. Configure SNMPv3 (User-Based Access with Enhanced Security)
For a more secure setup, configure SNMPv3 with authentication and privacy settings:
switch(config)# snmpv3 user AuvikUser auth sha auth-pass plaintext YourAuthPass priv aes priv-pass plaintext YourPrivPass switch(config)# snmpv3 user AuvikUser context AuvikContext
Replace AuvikUser, YourAuthPass, YourPrivPass, and AuvikContext with your desired usernames, passwords, and context names. Ensure these credentials are also configured in Auvik.
3. Verify SNMP Configuration
After configuration, verify the SNMP settings:
switch# show snmp vrf switch# show snmp community switch# show snmpv3 users
These commands will display the current SNMP configuration, allowing you to confirm that settings are correctly applied.
Access Control Considerations
While SNMPv3 provides enhanced security features, it's important to note that applying Access Control Lists (ACLs) directly to SNMPv3 configurations on Aruba CX switches is not supported. However, you can still use ACLs to restrict SNMP access when using SNMPv2c by applying ACLs to the community strings.
SNMPv2c Considerations
For example, to restrict SNMPv2c access to a specific management station:
SNMPv2C Considerations
SNMPv2c Configuration Examples
SNMPv2c Configuration Examples
switch(config)# access-list ip SNMP_ACL switch(config-acl-ip)# 10 permit udp host <Auvik Collector IP> eq snmp any switch(config-acl-ip)# 30 deny udp any any eq snmp switch(config-acl-ip)# exit switch(config)# snmp-server community AuvikReadOnly acl SNMP_ACL