Configuring SNMP Parameters

This section describes the following topics:

SNMP Configuration Parameters

Aruba Central supports SNMPv1Simple Network Management Protocol version 1. SNMPv1 is a widely used network management protocol., SNMPv2cCommunity-Based Simple Network Management Protocol version 2. SNMPv2C uses the community-based security scheme of SNMPv1 and does not include the SNMPv2 security model., and SNMPv3Simple Network Management Protocol version 3. SNMPv3 is an enhanced version of SNMP that includes security and remote configuration features. for reporting purposes only. An Instant AP cannot use SNMPSimple Network Management Protocol. SNMP is a TCP/IP standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention.  to set values in an Aruba system.

You can configure the following parameters for an Instant AP:

Table 1: SNMP Parameters

Data Pane Item	Description
Community Strings for SNMPV1 and SNMPV2	An SNMP Community string is a text string that acts as a password, and is used to authenticate messages sent between the virtual controller and the SNMP agent.
If you are using SNMPv3 to obtain values from the Instant AP, you can configure the following parameters:
Name	A string representing the name of the user.
Authentication Protocol	An indication of whether messages sent on behalf of this user can be authenticated, and if so, the type of authentication protocol used. This can take one of the two values: MD5—HMAC-MD5Message Digest 5. The MD5 algorithm is a widely used hash function producing a 128-bit hash value from the data input. -96 Digest Authentication Protocol SHA—HMAC-SHASecure Hash Algorithm. SHA is a family of cryptographic hash functions. The SHA algorithm includes the SHA, SHA-1, SHA-2 and SHA-3 variants. -96 Digest Authentication Protocol
Authentication protocol password	If messages sent on behalf of this user can be authenticated, the (private) authentication key for use with the authentication protocol. This is a string password for MD5 or SHA depending on the choice above.
Privacy protocol	An indication of whether messages sent on behalf of this user can be protected from disclosure, and if so, the type of privacy protocol which is used. This takes the value DESData Encryption Standard. DES is a common standard for data encryption and a form of secret key cryptography, which uses only one key for encryption and decryption. (CBC-DES Symmetric Encryption).
Privacy protocol password	If messages sent on behalf of this user can be encrypted/decrypted with DES, the (private) privacy key for use with the privacy protocol.

Configuring Community String for SNMP

This section describes the procedure for configuring SNMPv1, SNMPv2Simple Network Management Protocol version 2. SNMPv2 is an enhanced version of SNMPv1, which includes improvements in the areas of performance, security, confidentiality, and manager-to-manager communications., and SNMPv3 community strings in Aruba Central.

Creating Community strings for SNMPv1 and SNMPv2 using Aruba Central

To create community strings for SNMPv1 and SNMPv2, complete the following steps:

1. In the Network Operations app, set the filter to a group that contains at least one AP.

The dashboard context for the group is displayed.

2. Under Manage, click Devices > Access Points.

A list of access points is displayed in the List view.

3. Click the Config icon.

The tabs to configure the access points are displayed.

4. Click Show Advanced, and click the System tab.

The System details page is displayed.

5. Click the SNMP accordion.

6. Under SNMP, click + to add a new community string.

7. In the New SNMP window, enter a name for the community string.

8. Click OK.

9. To delete a community string, select the string in the SNMP pane, and then click the delete icon.

Creating community strings for SNMPv3 using Aruba Central

To create community strings for SNMPv3, complete the following steps:

1. In the Network Operations app, set the filter to a group that contains at least one AP.

The dashboard context for the group is displayed.

2. Under Manage, click Devices > Access Points.

A list of access points is displayed in the List view.

3. Click the Config icon.

The tabs to configure the access points are displayed.

4. Click Show Advanced, and click the System tab.

The System details page is displayed.

5. Click the SNMP accordion.

6. Under User for SNMPV3, click + to add a new community string for SNMPv3.

7. In the New SNMPv3 User window, enter the following information:

a. In the Auth protocol drop-down list, select the type of authentication protocol.

b. In the Password text-box, enter the authentication password and retype the password in the Retype Password text-box.

c. In the Privacy protocol drop-down list, select the type of privacy protocol.

d. In the Password text-box, enter the privacy protocol password and retype the password in the Retype Password text box.

e. Click OK.

8. To edit the details for a particular user, select the user, and then click the edit icon.

9. To delete a particular user, select the user, and then click the delete icon.

Configuring SNMP Trap Receivers

Aruba Central supports the configuration of external trap receivers. Only the Instant AP acting as the VC generates traps. The OIDObject Identifier. An OID is an identifier used to name an object. The OIDs represent nodes or managed objects in a MIB hierarchy. The OIDs are designated by text strings and integer sequences and are formally defined as per the ASN.1 standard. of the traps is 1.3.6.1.4.1.14823.2.3.3.1.200.2.X.

To configure SNMP traps, complete the following steps:

1. In the Network Operations app, set the filter to a group that contains at least one AP.

The dashboard context for the group is displayed.

2. Under Manage, click Devices > Access Points.

A list of access points is displayed in the List view.

3. Click the Config icon.

The tabs to configure the access points are displayed.

4. Click Show Advanced, and click the System tab.

The System details page is displayed.

5. Click the SNMP accordion.

6. Under SNMP Traps Receivers, click + to add a new community string for SNMP Traps Receivers.

7. In the New SNMP Trap Receiver window, enter the following information:

a. In the IP Address text-box, enter the IP address of the new SNMP Trap Receiver.

b. In the Version drop-down list, select the SNMP version, such as v1, v2c, v3. The version specifies the format of traps generated by the access point.

c. In the Community/Username text-box, specify the community string for SNMPv1 and SNMPv2c traps and a username for SNMPv3 traps.

d. In the Port text-box, enter the port to which the traps are sent. The default value is 162.

e. In the Inform drop-down list, select Yes or No. When enabled, traps are sent as SNMP INFORM messages. It is applicable to SNMPv3 only. The default value is Yes.

f. Click OK.