Skip to main content
ONTAP MetroCluster

Configure MetroCluster IP switches for health monitoring

Contributors netapp-aoife

In MetroCluster IP configurations, you can configure SNMPv3 to monitor the health of IP switches.

Step 1: Configure the SNMPv3 user on MetroCluster IP switches

Use the following steps to configure the SNMPv3 user on the MetroCluster IP switches.

Important You must use both the authentication and privacy protocols in the commands. Using authentication without privacy is not supported.
For Broadcom IP switches
Steps
  1. If the 'network-admin' user group doesn't already exist, create it:

    (IP_switch_1) (Config)# snmp-server group network-admin v3 auth read "Default"

  2. Confirm the 'network-admin' group has been created:

    (IP_switch_1) (Config)# show snmp group

  3. Configure the SNMPv3 user on Broadcom IP switches:

    (IP_switch_1)# config
    (IP_switch_1) (Config)# snmp-server user <user_name> network-admin [auth-md5/auth-sha/noauth] "<auth_password>" [priv-aes128/priv-des] "<priv_password>"

    You must use quotation marks around the authentication and privacy passwords, as shown in the following example:

    snmp-server user admin1 network-admin auth-md5 "password" priv-des "password"
For Cisco IP switches
Steps
  1. Run the following commands to configure the SNMPv3 user on a Cisco IP switch:

    IP_switch_A_1 # configure terminal
    IP_switch_A_1 (config) # snmp-server user <user_name>  auth [md5/sha/sha-256] <auth_password> priv (aes-128) <priv_password>
  2. Verify that the SNMPv3 user is configured on the switch:

    IP_switch_A_1(config) # show snmp user <user_name>

    The following example output shows that the user admin is configured for SNMPv3:

    IP_switch_A_1(config)# show snmp user admin
    User                Auth      Priv(enforce) Groups              acl_filter
    
    ____                ____      _____________ ______              __________
    
    admin               md5       aes-128(no)   network-admin

Step 2: Configure the SNMPv3 user in ONTAP

Use the following steps to configure the SNMPv3 user in ONTAP.

  1. Configure the SNMPv3 user in ONTAP:

    security login create -user-or-group-name <user_name> -application snmp -authentication-method usm -remote-switch-ipaddress <ip_address>

  2. Configure switch health monitoring to monitor the switch using the new SNMPv3 user:

    system switch ethernet modify -device <device_id> -snmp-version SNMPv3 -community-or-username <user_name>

  3. Verify that the device serial number that will be monitored with the newly created SNMPv3 user is correct:

    1. Display the switch health monitoring polling time period:

      system switch ethernet polling-interval show

    2. Run the following command after the polling time period has elapsed:

      system switch ethernet show-all -instance -device <device_serial_number>