Configure MetroCluster IP switches for health monitoring
In MetroCluster IP configurations, you can configure SNMPv3 to monitor the health of IP switches.
Step 1: Configure the SNMPv3 user on MetroCluster IP switches
Use the following steps to configure the SNMPv3 user on the MetroCluster IP switches.
You must use both the authentication and privacy protocols in the commands. Using authentication without privacy is not supported. |
-
If the 'network-admin' user group doesn't already exist, create it:
(IP_switch_1) (Config)# snmp-server group network-admin v3 auth read "Default"
-
Confirm the 'network-admin' group has been created:
(IP_switch_1) (Config)# show snmp group
-
Configure the SNMPv3 user on Broadcom IP switches:
(IP_switch_1)# config (IP_switch_1) (Config)# snmp-server user <user_name> network-admin [auth-md5/auth-sha/noauth] "<auth_password>" [priv-aes128/priv-des] "<priv_password>"
You must use quotation marks around the authentication and privacy passwords, as shown in the following example:
snmp-server user admin1 network-admin auth-md5 "password" priv-des "password"
-
Run the following commands to configure the SNMPv3 user on a Cisco IP switch:
IP_switch_A_1 # configure terminal IP_switch_A_1 (config) # snmp-server user <user_name> auth [md5/sha/sha-256] <auth_password> priv (aes-128) <priv_password>
-
Verify that the SNMPv3 user is configured on the switch:
IP_switch_A_1(config) # show snmp user <user_name>
The following example output shows that the user
admin
is configured for SNMPv3:IP_switch_A_1(config)# show snmp user admin User Auth Priv(enforce) Groups acl_filter ____ ____ _____________ ______ __________ admin md5 aes-128(no) network-admin
Step 2: Configure the SNMPv3 user in ONTAP
Use the following steps to configure the SNMPv3 user in ONTAP.
-
Configure the SNMPv3 user in ONTAP:
security login create -user-or-group-name <user_name> -application snmp -authentication-method usm -remote-switch-ipaddress <ip_address>
-
Configure switch health monitoring to monitor the switch using the new SNMPv3 user:
system switch ethernet modify -device <device_id> -snmp-version SNMPv3 -community-or-username <user_name>
-
Verify that the device serial number that will be monitored with the newly created SNMPv3 user is correct:
-
Display the switch health monitoring polling time period:
system switch ethernet polling-interval show
-
Run the following command after the polling time period has elapsed:
system switch ethernet show-all -instance -device <device_serial_number>
-