18-12
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter18 Configuring SNMP
Displaying SNMP Status
This example shows how to allow read-only access for all objects to members of access list 4 that use
the comaccess community string. No other SNMP managers have access to any objects. SNMP
Authentication Failure traps are sent by SNMPv2C to the host cisco.com using the community string
public.
AP(config)# snmp-server community comaccess ro 4
AP(config)# snmp-server enable traps snmp authentication
AP(config)# snmp-server host cisco.com version 2c public
This example shows how to send Entity MIB traps to the host cisco.com. The community string is
restricted. The first line enables the access point to send Entity MIB traps in addition to any traps
previously enabled. The second line specifies the destination of these traps and overwrites any previous
snmp-server host commands for the host cisco.com.
AP(config)# snmp-server enable traps entity
AP(config)# snmp-server host cisco.com restricted entity
This example shows how to enable the access point to send all traps to the host myhost.cisco.com using
the community string public:
AP(config)# snmp-server enable traps
AP(config)# snmp-server host myhost.cisco.com public
This example shows how to configure these SNMPv3 settings:
•a view name (iso)
•an SNMP engine ID (1234567890) that this agent uses to identify itself to the remote host at IP
address 1.4.74.10
•an SNMPv3 group (admin) which supports privacy encryption, and all users of the group have read
and write access to all objects defined in the iso view
•an SNMP user (joe) that belongs to the admin group, uses MD5 authentication for queries, uses
xyz123 as a password for MD5, uses DES56 data query encryption, and uses key007 as an encryption
key
•an SNMP user (fred) that belongs to the admin group, uses MD5 authentication for queries, uses
abc789 as an encrypted password for MD5, uses DES56 data query encryption, and uses key99 as
an encryption key
AP(config)# snmp-server view iso iso included
AP(config)# snmp-server engineID remote 1.4.74.10 1234567890
AP(config)# snmp-server group admin v3 priv
AP(config)# snmp-server group admin v3 priv read iso write iso
AP(config)# snmp-server user joe admin v3 auth md5 xyz123 priv des56 key007
AP(config)# snmp-server user fred admin v3 encrypted auth md5 abc789 priv des56 key99
Note After you enter the last command in this example, the show running-config and
show startup-config commands display only a partial SNMP configuration.
Displaying SNMP Status
To display SNMP input and output statistics, including the number of illegal community string entries,
errors, and requested variables, use the show snmp privileged EXEC command. For information about
the fields in this display, refer to the Cisco IOS Configuration Fundamentals Command Reference.