After you enable SNMP traps, you can configure one or more SNMP agent users that allow the SNMP agent to poll Cryptographic Security Platform Vault for system information.

The following OIDS are available for querying:

  • IF-MIB::ifTable (.1.3.6.1.2.1.2.2)
  • HOST-RESOURCES-MIB::hrFSTable (.1.3.6.1.2.1.25.3.8)
  • HOST-RESOURCES-MIB::hrSystem (.1.3.6.1.2.1.25.1)
  • 'NET-SNMP-EXTEND-MIB::nsExtendOutputFull."svstat”' (.1.3.6.1.4.1.8072.1.3.2.3.1.2.6.115.118.115.116.97.116)
  • SNMPv2-MIB::system (.1.3.6.1.2.1.1)
  • UCD-SNMP-MIB::dskTable (.1.3.6.1.4.1.2021.10)
  • UCD-SNMP-MIB::laTable (.1.3.6.1.4.1.2021.9)
  • UCD-SNMP-MIB::memory (.1.3.6.1.4.1.2021.4)
  • UCD-SNMP-MIB::systemStats (.1.3.6.1.4.1.2021.11)

Procedure 

  1. Log into the Cryptographic Security Platform Vault Management webGUI using an account with Security Admin privileges. In the top right, click the Switch to Appliance Management link.
  2. In the top menu bar, click Settings.
  3. In the System Settings section click SNMP Settings.
  4. Click the Agent Users tab.

  5. To create a new agent, click Actions > Add User and specify the options you want to use. When you are done, click Apply.

    Note: SNMP agent settings cannot be changed after you save the agent.

    Field

    SNMP Version

    Description

    Version

    All

    The SNMP version. Cryptographic Security Platform Vault supports version 2c and version 3.

    Note: The rest of the fields displayed in page depend upon the selected version.

    Network

    2c

    An optional field that restricts access to the specified IP address of a host or network. For example: 192.168.100.0/24.

    Community

    2c

    The community string for your SNMP server.

    User

    3

    The user ID that should be associated with the agent.

    Security Level

    3

    This can be:

    • No Authentication, No Privacy—Cryptographic Security Platform Vault sends the messages in plain text and no authentication is done by the SNMP server.
    • With Authentication, No Privacy—Cryptographic Security Platform Vault sends the message in plain text but the SNMP server authenticates the message before logging it.

    • With Authentication, With Privacy—Cryptographic Security Platform Vault encrypts the message before sending it and the SNMP server authenticates the message before logging it.

      For encryption, Cryptographic Security Platform Vault supports AES (Advanced Encryption Standard) or DES (Data Encryption Standard).

    Authentication Protocol

    3

    The type of authentication to use with the SNMP server if one of the authentication options is selected in the Security Level field. Cryptographic Security Platform Vault supports MD5 and SHA (Secure Hash Algorithm).

    Authentication Key

    3

    The authentication key that Cryptographic Security Platform Vault should send to the SNMP manager if one of the authentication options is selected in the Security Level field. If you want to view the key in plain text, click the eye icon.

    Privacy Protocol

    3

    The privacy protocol to use if With Authentication, With Privacy is selected in the Security Level field. This can be AES or DES.

    Privacy Key

    3

    The privacy key to use if With Authentication, With Privacy is selected in the Security Level field. If you want to view the key in plain text, click the eye icon.

  6. To delete an existing agent, select that agent then select Actions > Delete Selected User. To delete multiple users, enable Multi-Select, click the agents you want to delete, then select Actions > Delete Selected Users.