To enable support for both remote access by the Simple Network Management Protocol (SNMP) servers and the generation of SNMP traps for health and security events, use the snmp-server command in configuration mode. SNMP support and trap generation are enabled by default. You can also specify the community string that an SNMP server needs to query the FireEye appliance, and the system contact and location information stored in MIB-II. Optionally, SNMP access can be limited to specific interfaces.
Syntax
[no] snmp-server community <community_string> [ro]
[no] snmp-server contact <contact>
[no] snmp-server enable {communities | mult-communities | notify}
[no] snmp-server host <ip-address> {disable | traps {<community_string> | port <port_id> [<community_string> | version <vers> [<community_string>] }
[no] snmp-server listen {enable | interface <interface_name> }
[no] snmp-server location <location>
[no] snmp-server port <port_id>
[no] snmp-server user <username> v3 {enable | [encrypted | prompt]} {auth md5 | sha} <password> [priv des [<password>] |priv aes-128 [<password>]}
Parameters
no
Use the no form of this command to clear the configuration.
community <community_string> [ro]
Community string ([ro] means read-only) needed by a remoteSNMP server to query the Trellix appliance. The default is public.
cotact <contact>
Contact information stored in the MIB-II sysContact field. Must be enclosed in quotation marks if the text includes spaces.
enable {communities | mult-communities | notify}
Enables SNMP communities or multiple communities or enables the sending of SNMP notifications (traps and informs) from this system.
host <ip-address> {disable | traps {<community_string> | port <port_id> [<community_string> | version <vers> [<community_string>]}
Configure hosts to receive or disable IPv4- or IPv6-based SNMP traps. See snmp server host
listen {enable | interface <interface_name>}
Limits SNMP access to a specified list of “listen” interfaces (disabled by default). The interface name option specifies one or more interfaces (such as “ether1”) that can be used for SNMP access (one interface per command.
location <location>
Description of the physical location of the Trellix appliance stored in the MIB-II sysLocation field. Must be enclosed in quotation marks if the text includes spaces.
port <port_id
Default port to which traps are sent.
user <username> v3 {enable | [encrypted | prompt]} {auth md5 | sha} <password> [priv des <password> | priv aes-128 <password>]
Configure SNMP v3 user access on a per-user basis. See snmp-server user.
notify event <event>
Specify which events will be sent as SNMP notifications.
Example
The following example specifies that the private community string is required for remote access.
hostname (config) # snmp-server community private
The following example specifies the system location.
hostname (config) # snmp-server location "Bldg. 1"
User role
Admin or Operator
Supported appliances
Command introduced before Release 7.6.0.
Endpoint Security (HX): Release 2.5