PDF

Configure the SNMP policy using the GUI

Updated: April 15, 2026

Want to summarize with AI?

Log in

Configures and enables an SNMP policy on Cisco ACI-mode switches using the GUI, including prerequisites, policy creation, and assignment to a pod policy group.

Use this procedure to configure and enable an SNMP policy on Cisco ACI-mode switches.

Before you begin

To allow SNMP communications, configure the following prerequisites:

  • Configure an out-of-band contract that allows SNMP traffic. SNMP requests typically use UDP port 161.

  • Configure the Cisco APIC out-of-band IP addresses in the mgmt tenant. If you configured the out-of-band addresses during Cisco APIC setup, do not configure them in the mgmt tenant again.

Procedure

  1. In the menu bar, click Fabric.

  2. In the submenu bar, click Fabric Policies.

  3. In the Navigation pane, expand Pod Policies.

  4. Under Pod Policies, expand Policies.

  5. Right-click SNMP, and choose Create SNMP Policy.

    Alternatively, edit the default policy using the same steps.

  6. In the SNMP policy dialog box, configure the policy:

    1. In the Name field, enter a name for the SNMP policy.
    2. In the Admin State field, select Enabled.
    3. Optional: In the SNMP v3 Users table, click the + icon, and configure the SNMPv3 user:

      Complete this step only if SNMPv3 access is required.

      1. In the Name field, enter a user profile name.

      2. Select AES-128, AES-256, or None for Privacy Type.

      3. In the Privacy Key field, enter the privacy key.

      4. From the Authorization Type drop-down list, choose an authorization type.

      5. In the Authorization Key field, enter the authorization key.

      6. Click Update.

    4. In the Community Policies table, click the + icon.
    5. In the Name field, enter a name for the community policy.

      A community policy name can contain a maximum of 32 characters. It can contain only letters, numbers, underscores (_), hyphens (-), and periods (.). It cannot contain the at sign (@).

    6. Click Update.
    7. In the Trap Forward Servers table, click the + icon.
    8. In the IP Address field, enter the IP address of the external server.
    9. Click Update.

  7. To configure the SNMP management stations that can access the fabric, configure the following settings in the SNMP policy dialog box:

    1. In the Client Group Policies table, click the + icon to open the Create SNMP Client Group Profile dialog box.
    2. In the Name field, enter a name for the SNMP client group profile.
    3. From the Associated Management EPG drop-down list, choose the management EPG.
    4. In the Client Entries table, click the + icon.
    5. In the Name field, enter the client's name. In the Address field, enter the client's IP address, and click Update.
      Note

      When an SNMP management station connects to APIC using SNMPv3, APIC does not enforce the client IP address in the SNMP client group profile. The management station must be listed in Client Entries, but its IP address does not need to match because the SNMPv3 credentials provide access.

  8. Click OK.

  9. Click Submit.

  10. Under Pod Policies, expand Policy Groups, and choose an existing policy group or right-click Policy Groups and choose Create POD Policy Group.

    You can use an existing pod policy group or create a new one. The pod policy group can contain other pod policies in addition to the SNMP policy.

  11. In the pod policy group dialog box, configure the policy group:

    1. In the Name field, enter a name for the pod policy group.
    2. From the SNMP Policy drop-down list, choose the SNMP policy that you configured, and click Submit.

  12. Under Pod Policies, expand Profiles, and click default.

  13. In the Work pane, from the Fabric Policy Group drop-down list, choose the pod policy group that you created.

  14. Click Submit.

  15. Click OK.

The SNMP policy is configured and enabled. SNMP management stations can communicate with the network according to the policy.