Monitoring SNMP

To monitor the status of SNMP operations on your network, enter Privileged Exec mode. You can then establish a baseline and use the show commands to view statistics.

Establishing a Baseline

SNMP statistics are stored in system counters. The only way to reset the system counters is to reboot the router. You can, however, establish a baseline for SNMP statistics by setting a group of reference counters to zero.

baseline snmp

• Use to establish a baseline for SNMP statistics.
• The system implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
• To display statistics relative to the current baseline, use the delta keyword with SNMP show commands.
• SNMP operations (such as Get and Set) continue to use and report statistics from the system counters.
• See Viewing SNMP Status for a sample display when you enter the show snmp command. If you establish a baseline and then enter show snmp, the statistics now have zero or low values.
• Example

  host1#baseline snmp
  host1#show snmp
  Contact: Joe Administrator
  Location: Network Lab, Bldg 3 Floor 1
  2 SNMP packets input
      0 Bad SNMP version errors
      0 Unknown community name
      0 Illegal operation for community name supplied
      0 Encoding errors
      0 Number of requested variables
      0 Number of altered variables
      1 Get-request PDUs
      1 Get-next PDUs
      0 Set-request PDUs
      0 Unknown security models
      0 Unavailable contexts
  2 SNMP packets out
      0 Too big errors (Maximum packet size 1500)
      1 No such name errors
      0 Bad values errors
      0 General errors
      2 Get-response PDUs
      0 SNMP trap PDUs
      0 Invalid Message Report PDUs
      0 Unknown PDU Handler Report PDUs
      0 Unknown Context Report PDUs
      0 Unsupported Security Level Report PDUs
      0 Not in time Window Report PDUs
      0 Unknown Username Report PDUs
      0 Unknown Engine ID Report PDUs
      0 Wrong Digest Report PDUs
      0 Decryption Error Report PDUs

• There is no no version.
• See baseline snmp.

Viewing SNMP Status

To view SNMP status on your network, use the following show commands.

show snmp

• Use to display all the information about SNMP status.
• To display statistics relative to the current baseline, use the delta keyword.
• Field descriptions
  • Contact—Router’s contact person
  • Location—Router’s location
  • SNMP packets input—Total number of SNMP packets received by the router
    • Bad SNMP version errors—Number of SNMP PDUs with a bad version number
    • Unknown community name—Number of SNMP PDUs that had an unrecognized community name
    • Illegal operation for community name supplied—Number of access violations based on the configured privilege level for community strings
    • Encoding errors—Number of AS number version 1 encoding and decoding errors
    • Number of requested variables—Number of variable bindings processed by the SNMP agent
    • Number of altered variables—Number of variable bindings processed successfully in SNMP set commands
    • Get-request PDUs—Number of get-exact SNMP PDUs processed
    • Get-next PDUs—Number of get-next SNMP PDUs processed
    • Set-request PDUs—Number of set SNMP PDUs processed
    • Unknown security models—Number of SNMP PDUs with unrecognized security
    • Unavailable contexts—Number of SNMP proxy requests to unknown entities
  • SNMP packets out—Total number of SNMP packets sent by the router
    • Too big errors—Number of processed PDUs that resulted in SNMP PDUs too large to encode
    • No such name errors—Number of requests that resulted in noSuchName errors. If interfaces configured on modules that do not support 64-bit counters are accessed, the system returns a noSuchName message.
    • Bad values errors—Number of requests that resulted in badValues errors
    • General errors—Number of general errors
    • Get-response PDUs—Number of requests that resulted in getResponse PDUs
    • SNMP trap PDUs—Number of SNMP trap PDUs generated by this agent
    • SNMP trap proxied—Number of traps generated by this agent that are sent via trap-proxy
    • Invalid Message Report PDUs—Number of packets received by the SNMP engine that were dropped because there were invalid or inconsistent components in the SNMP message
    • Unknown PDU Handler Report PDUs—Number of packets received by the SNMP engine that were dropped because the PDU in the packet could not be passed to an application responsible for handling the PDU type; for example, no SNMP application had registered for the proper combination of the context engine ID and PDU type
    • Unknown Context Report PDUs—Number of packets received by the SNMP engine that were dropped because the context contained in the message was unknown
    • Unsupported Security Level Report PDUs—Number of packets received by the SNMP engine that were dropped because they requested a security level that was unknown to the SNMP engine or otherwise unavailable
    • Not in time Window Report PDUs—Number of packets received by the SNMP engine that were dropped because they appeared outside the authoritative SNMP engine window
    • Unknown Username Report PDUs—Number of packets received by the SNMP engine that were dropped because they referenced a user that was not known to the SNMP engine
    • Unknown Engine ID Report PDUs—Number of packets received by the SNMP engine that were dropped because they referenced an snmpEngineID that was not known to the SNMP engine
    • Wrong Digest Report PDUs—Number of packets received by the SNMP engine that were dropped because they did not contain the expected digest value
    • Decryption Error Report PDUs—Number of packets received by the SNMP engine that were dropped because they could not be decrypted
• Example

  host1#show snmp
  Contact: Joe Administrator
  Location: Network Lab, Bldg 3 Floor 1
  538 SNMP packets input
      0 Bad SNMP version errors
      0 Unknown community name
      0 Illegal operation for community name supplied
      0 Encoding errors
      695 Number of requested variables
      0 Number of altered variables
      26 Get-request PDUs
      512 Get-next PDUs
      0 Set-request PDUs
      0 Unknown security models
      0 Unavailable contexts
  538 SNMP packets out
      0 Too big errors (Maximum packet size 1500)
      10 No such name errors
      0 Bad values errors
      0 General errors
      538 Get-response PDUs
      0 SNMP trap PDUs
      0 Invalid Message Report PDUs
      0 Unknown PDU Handler Report PDUs
      0 Unknown Context Report PDUs
      0 Unsupported Security Level Report PDUs
      0 Not in time Window Report PDUs
      0 Unknown Username Report PDUs
      0 Unknown Engine ID Report PDUs
      0 Wrong Digest Report PDUs
      0 Decryption Error Report PDUs

• See show snmp.

show snmp access

• Use to display information about the groups you configured.
• Field descriptions
  • Group Name—Name of the group
  • Model—Security model; for example, user-based security model (USM)
  • Level—Method for authentication and privacy
    • none—No authentication and no privacy
    • auth—Authentication only
    • priv—Authentication and privacy
  • Read—Name of the view for read access
  • Write—Name of the view for write access
  • Notify—Name of the view for notification
  • Storage—SNMP storage type, volatile or nonvolatile
• Example

  host1#show snmp access
  Group Name          Model  Level  Read         Write        Notify
  ------------------  -----  -----  -----------  -----------  ---------
  admin               usm    priv   everything   everything   everything
  mirror              usm    priv   mirrorAdmin  mirrorAdmin  mirrorAdmin
  public              usm    none   user         none         none
  private             usm    auth   user         user         user

• See show snmp access.

show snmp community

• Use to display information about the SNMP communities.
• Field descriptions
  • Community—Name of the community and the associated virtual router
  • View—Name of the view
  • Priv—Access privilege for the view
    • ro—Read-only access
    • rw—Read-write access
    • admin—All privileges
  • AccList—Number of access lists associated with this community
• Example

  host1#show snmp community
  
  

  Community                    View           Priv  AccList
  ------------------------------------------  ----  -------
  admin@default                everything     rw          0
  private@default              user           rw          0
  public@default               user           ro          0

• See show snmp community.

show snmp group

• Use to display the list of available groups. Detailed information is available through the show snmp access command.
• Field descriptions
  • groupName—Name of the group
  • securityModel—SNMP security model
    • v1—SNMPv1
    • v2c—SNMPv2c
    • usm—SNMPv
  • authenticationLevel—Method for authentication and privacy
    • none—No authentication and no privacy
    • auth—Authentication only
    • priv—Authentication and privacy
  • readView—Name of the view for read access
  • writeView—Name of the view for write access
  • notifyView—Name of the view for notification
  • storageType—SNMP storage type
    • volatile—Loses contents when power is lost
    • nonVolatile—Does not lose contents when power is lost
• Example

  host1#show snmp group
  Group Name                                Storage Type
  ----------------------------------------  ---------------
  group1                                    Volatile
  group2                                    NonVolatile
  admin                                     Permanent
  mirror                                    Permanent
  public                                    Permanent
  private                                   Permanent

• See show snmp group.

show snmp notificationLog

• Use to display the configuration of the SNMP notification log.
• Field descriptions
  • Global Age Out Value—Ageout for traps in the notification log tables
  • Global Entry Limit Value—Maximum number of notifications kept in all notification log tables
• Example

  host1#show snmp notificationLog
  Global Age Out Value:      1440 minutes
  Global Entry Limit Value : 500
  No notification log name information is available 

• See show snmp notificationLog.

show snmp trap

• Use to display configuration information about SNMP traps and trap destinations.
• Field descriptions
  • Enabled Categories—Trap categories that are enabled on the router.
  • SNMP authentication failure trap—Enabled or disabled.
  • Trap Source—Interface whose IP address is used as the source address for all SNMP traps.
  • Trap Source Address—IP address used as the source address for all SNMP traps.
  • Trap Proxy—Enabled or disabled.
  • Global Trap Severity Level—Global severity level filter; if a trap does not meet this severity level, it is discarded. If the per-category trap severity level is not set for a particular category, the severity displayed here is used for that category.
  • Trap Severity Level—Severity level filter for a trap category; this severity level overrides the globally configured trap severity level.
  • TrapCategories—Types of traps enabled on the router for which trap severity is configured at the category level.
  • Address—IP address of the trap recipient.
  • Security String—Name of the SNMP community.
  • Ver—SNMP version (v1 or v2) of the SNMP trap packet.
  • Port—UDP port on which the trap recipient accepts traps.
  • Trap Categories—Types of traps that the trap recipient can receive.
  • TrapSeverityFilter—Severity level filter for this SNMP host.
  • Ping TimeOut—Configured ping timeout in minutes.
  • Maximum QueueSize—Maximum number of traps to be kept in the trap queue.
  • Queue DrainRate—Maximum number of traps per second to be sent to the host.
  • Queue Full discard method—Method used to discard traps when the queue is full:
    • dropFirstIn—Oldest trap in the queue is dropped.
    • dropLastIn—Most recent trap is dropped .
• Example

  host1# show snmp trap
  Enabled Categories: Bgp, Ospf, Sonet
  SNMP authentication failure trap is disabled
  Trap Source: FastEthernet 6/0, Trap Source Address:172.27.120.78
  Trap Proxy: enabled
  Global Trap Severity Level: 7 - debug
  
  Trap Severity Level    TrapCategories
  -------------------    -------------------
  7 - debug               ospf                                
  
  Address          Security String                   Ver  Port   Trap Categories
  ---------------  --------------------------------  ---  -----  ----------------
  192.168.1.10     public                            v1     162  BgpOspf
  
  
  Address         TrapSeverityFilter  Ping    Maximum    Queue    Queue Full
                                     TimeOut QueueSize DrainRate discrd methd
  --------------- ------------------ ------- --------- --------- -------------
  192.168.1.10    2 - critical       1       32        0         dropLastIn
  
  

• See show snmp trap.

show snmp trap statistics

• Use to display statistics for all SNMP traps on the virtual router, as well as statistics for each SNMP host configured on the virtual router.
• Field descriptions
  • Trap request(s)—Number of local traps requested
  • Proxy trap request(s)—Number of proxy traps requested
  • Trap(s) discarded—Total number of traps discarded
    • No system memory—Traps discarded because there was not enough system memory
    • No queue resources—Traps discarded because there were no queue resources available
    • SNMP agent disabled—Traps discarded because the SNMP agent was disabled
    • Global trap category disabled—Traps discarded because they were filtered by the snmp enable trap command
    • Global minimum severity level—Traps discarded because they did not match the severity level set with the snmp enable traps trapfilters command.
  • Trap(s) out—Total number of traps sent by the virtual router
  • Trap(s) proxied—Total number of traps proxied by the virtual router
  • Address—IP address of the host
  • TrapsDiscarded Severity/Category—Severity level and category of the discarded traps
  • TrapsDiscrded bad encoding—Traps discarded because of bad encoding
  • TrapsDiscrded Queue Full—Traps discarded because the queue was full
  • TrapsDiscrded NoHostRespons—Traps discarded because the host did not respond to pings sent to the host
  • Trap PDUs sentOut—Number of trap PDUs sent by this host

    host1#show snmp trap statistics
    Trap request(s):3112
    Proxy trap request(s):0
    Trap(s) discarded:4
    No system memory:0
    No queue resources:0
    SNMP agent disabled:0
    Global trap category disabled:4
    Global minimum severity level:0
    Trap(s) out:3108
    Trap(s) proxied:0
    Address         TrapsDiscarded    TrapsDiscrded TrapsDiscrded TrapsDiscrded
                    Severity/Category bad encoding  Queue Full    NoHostRespons
    --------------- ----------------- ------------- ------------- -------------
    1.1.1.1         1081              0             511           32
    10.10.132.137   0                 0             0             0 

    Address         Trap PDUs
                    sentOut
    --------------- ---------
    1.1.1.1         536
    10.10.132.137   3108

• See show snmp trap statistics.

show snmp user

• Use to display information about users.
• Field descriptions
  • User—Name of the user
  • Auth—Authorization protocol for this user
    • no—No authorization protocol
    • md5—HMAC-MD5-96 authorization protocol
    • sha—HMAC-SHA-96 authorization protocol
  • Priv—Privacy protocol for this user
    • no—No privacy protocol
    • des—DES encryption algorithm for privacy
  • Group—Name of the group to which the user belongs
• Example SNMPv3 display.

  host1#show snmp user
  
  

  User                     Auth  Priv  Group
  ------------------------ ----  ----  -------------------
  josie                    md5   des   admin
  nightfly                 md5   no    private
  steelydan                no    no    public

• See show snmp user.

show snmp view

• Use to display information about the views you created.
• Field descriptions
  • View Name—Name of the view
  • View Type—Access privilege for the view
    • included—Specified object identifier (OID) trees are available in this view
    • excluded—Specified OID trees are not available in this view
  • Oid Tree—OID of the AS number version 1 subtree
  • Storage—SNMP storage type, volatile or nonvolatile
• Example

  host1#show snmp view
  
  

  View Name       View Type  Oid Tree
  --------------  ---------  ---------------------------
  user            included   1.3.6.1.
  
  
  user            excluded   1.3.6.1.4.1.4874.2.2.16.
  user            excluded   1.3.6.1.6.3.11.
  user            excluded   1.3.6.1.6.3.12.
  user            excluded   1.3.6.1.6.3.13.
  user            excluded   1.3.6.1.6.3.14.
  user            excluded   1.3.6.1.6.3.15.
  user            excluded   1.3.6.1.6.3.16.
  user            excluded   1.3.6.1.6.3.18.
  nothing         excluded   1.3.6.1.
  everything      included   1.3.6.1.
  everything      excluded   1.3.6.1.4.1.4874.2.2.77.
  mirrorAdmin     included   1.3.6.1.4.1.4874.2.2.77.

• See show snmp view.

Output Filtering

You can use the output filtering feature of the show commands to include or exclude lines of output based on a text string you specify. See Command-Line Interface, for details.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.