SNMP is an application-layer protocol that provides a message format for communication between managers and agents. The SNMP system consists of an SNMP manager, an SNMP agent, and a management information base (MIB). The SNMP manager can be part of a network management system (NMS) such as Cisco Prime Infrastructure and the agent and MIB reside on the device. To configure SNMP on the device, you define the relationship between the manager and the agent.

The SNMP agent contains MIB variables whose values the SNMP manager can request or change. A manager can get a value from an agent or store a value into the agent. The agent gathers data from the MIB, which is the repository for information about device parameters and network data. The agent can also respond to a manager's requests to get or set data.

An agent can send unsolicited traps to the manager. Traps are messages alerting the SNMP manager to a condition on the network. Traps can mean improper user authentication, restarts, link status (up or down), MAC address tracking, closing of a TCP connection, loss of connection to a neighbor, or other significant events.

SNMP Version 1 and SNMP Version 2 use community strings to authenticate access to the device. If the community string is correct, the device responds with the requested information. If the community string is incorrect, the device discards the request and does not respond.

SNMP Version 3 allows access to the device through a username and password, and an encryption method to improve security.

1. In the System Location field, enter the location of the device.
2. In the System Contact field, enter the contact details of the device administrator.

3. Choose SNMP Traps from the Available list and click -> to move them to the Enabled list.

4. Click Apply.

1. Click Add to add a new community.
2. Enter a name for the community for which you want to set access permissions. The name must be a unique, case-sensitive, alphanumeric string of up to 16 characters.
3. From the Access Mode drop-down list, choose the level of access you want to grant to this community. By default, Read Only is associated with the community.
4. Click Apply to Device to save the community.

1. Click Add to add a new SNMP V3 user group.
2. Enter a name for the SNMP V3 user group. The name must be a unique, case-sensitive, alphanumeric string of up to 16 characters.
3. From the Security Level drop-down list, choose the level of access you want to grant to this SNMP V3 user group.
4. Click Apply to Device to save the SNMP V3 user group.

1. Click Add.
2. Enter a name of the user.
3. Enter a group name for the profile. An SNMP group is an access control policy to which users can be added. Each SNMP group is configured with a security model. A user within an SNMP group should match the security model of the SNMP group. These parameters specify what type of authentication and privacy a user within an SNMP group uses. Each SNMP group name and security model pair must be unique.
4. From the Authentication Protocol drop-down list, choose an algorithm to configure authentication based on the Hashed Message Authentication Code (HMAC)-MD5 or HMAC-SHA algorithms. Enter a pass key to authenticate user access. Auth Protocol corresponds to the AuthNoPriv security model.
5. In addition to authentication, to configure Advanced Encryption Standard (AES) or Data Encryption Standard (DES) encryption, choose an encyption method from the Privacy Protocol drop-down list. AES 128, AES 192, and AES 256 use Cipher Feedback (CFB) mode with encryption key sizes of 128, 192, or 256 bits respectively. 3DES uses the Cipher Block Chaining (CBC)-DES (DES-56) standard with a 168-bit key size for encryption. Priv Protocol corresponds to the AuthPriv security model.
6. Enter a passkey for the user.
7. Click Apply to Device.

1. Click Add to add an SNMP host.

2. Enter the IP address from which this device accepts and sends SNMP packets. An AND operation is performed between the requesting entity’s IP address and the subnet mask before being compared to the IP address.

   Note: If the subnet mask is set to 0.0.0.0, an IP address of 0.0.0.0 matches all IP addresses. The default value is 0.0.0.0.

3. Enter the UDP port number for the remote SNMP agent of the device where the user resides.
4. Choose the SNMP version.
5. Choose the SNMP type to specify whether device can send traps or notifications.
6. For SNMP Versions 1 and 2, enter the SNMP community that you want to use.
7. Choose a security level for the SNMP host.
8. Click Apply to Device.

By default, all the wireless SNMP traps are disabled except for the Access Point trap. To enable the SNMP traps, click Enable All.

1. Select the wireless SNMP trap that you wish to enable. Click the Select All check box to enable all the trapflags present in the trap. For example, to enable all the trapflags in the Mesh trap section, check the Select All check box present at the right-hand corner of the section. Uncheck the Select All check box to remove selection.

   Note:In some traps, there are trapflags that are enabled by default. For example, in the Access Point trap, Crash, No Radio Cards, and Register trapflags are enabled by default. Select Broken Antenna trapflag to detect broken antenna.

2. Click Apply.