Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configure SNMP Ingest

Paragon Insights supports three methods of collecting telemetry data using SNMP. The ingest, also known as request-response, is a pull mode method in which Paragon Insights requests for telemetry data from the devices. The trap and inform notifications are push mode methods in which the devices notify Paragon Insights about key performance indicator events that prevents the devices from functioning as expected.

Paragon Insights supports SNMPv3 alongside the current SNMPv2c as an ingest method. Users with sp-admin role can select any version of SNMP in the Paragon Insights GUI.

SNMPv3 ingest provides you with an option to set authentication and privacy credentials to leverage the following features:

  • Authentication — Identifies and verifies the origin of an SNMPv3 message.

  • Privacy — Prevents packet analyzers from snooping the content of messages by encrypting them.

  • Integrity — Ensures that the content of SNMP messages is not altered while in transit without authorization.

Table 1 lists the supported authentication and privacy algorithms in SNMPv3 protocol.

Table 1: Authentication and Privacy Algorithms

Feature

Algorithm

Supported authentication algorithms

MD5

SHA-1

Supported privacy algorithms

DES

3DES

AES

In Paragon Insights, SNMPv3 ingest can be set at the device level. The configuration of SNMPv3 and SNMPv2c is mutually exclusive.

Note:

If a device is not configured for SNMP ingest, Paragon Insights uses SNMP v2c with SNMP Community set to public as the default settings.

Note:

In Paragon Insights, the SNMPv2c and SNMPv3 ingest and trap configurations share the same workflow.

To configure SNMP ingest at the device level:

  1. Click the Configuration > Device option in the left navigation bar.
  2. Select a device by clicking on the checkbox and click the edit device button (pencil icon).

    The Edit Device-Name window appears.

  3. Click on Protocol > SNMP.
  4. Enter the necessary values in the text boxes and select the appropriate options for the device.

    The following table describes the attributes in the Edit Device-Name window:

    Attributes

    Description

    SNMP

    Version

    Select either v2c or v3 in the drop-down menu.

    Get Community (Only for SNMPv2c)

    Enter an SNMP Community string for SNMPv2c ingest.

    In SNMPv2c, Community string is used to verify the authenticity of the ingest (request-response) message issued by the SNMP agent (devices such as routers, switches, servers, and so on).

    Port

    Port number required for SNMP ingest (request-response) messages. The standard port number is 161.

    Timeout

    Enter the timeout period in seconds between 0 and 65535 for SNMP notifications.

    Timeout denotes the number of seconds after which the SNMP agent stops re-sending notifications.

    Retry Count

    Enter a retry count between 0 and 255.

    Retry count denotes the number of times the SNMP agent re-transmits the SNMP notification.

    V3 Username

    Enter a username for SNMPv3 ingest (request-response), trap, and inform notifications.

    V3 Context Name

    (Optional) Enter a context name for SNMPv3 trap and inform notifications.

    Context in SNMP denotes a collection of information (objects) related to management domain in management information base (MIB). Multiple instances of the MIB objects are used by different network elements that are identified using SNMP context name and context engine id.

    V3 Authentication

    This field appears if you selected v3 in SNMP Version field.

    Select an authentication protocol from the drop-down list.

    Select None from the drop-down menu if you want to set SNMPv3 authentication to None.

    V3 Privacy

    This field appears if you selected v3 in SNMP Version field.

    Select a privacy protocol from the drop-down list.

    Select None from the drop-down menu if you want to set SNMPv3 privacy to None.

    V3 Auth Passphrase

    This field appears if you selected v3 in SNMP Version field.

    Enter a passphrase for SNMPv3 authentication.

    SNMPv3 Privacy Passphrase

    This field appears if you selected v3 in SNMP Version field

    Enter a passphrase to encrypt the ingest message.
  5. Click OK to save the configuration.

    A confirmation window confirms that the edit operation was successful.

Related Documentation