SNMP Management Station

Use the configuration mode snmp-server host command to define the interface and the IP address of the SNMP management station(s) to which traps will be sent and/or from which the SNMP polls (requests) will be accepted. By default, both the traps and polls features are on—adding either keyword to the end of the command limits the command to only that activity. For example, using the Trap option would allow traps, but not polls. Up to 32 SNMP stations can be defined by creating multiple commands. Use the no form of the command to turn the feature off. The syntax is

Pix(config)#snmp-server host [if_name] ip_addr {trap | poll}
Pix(config)#no snmp-server [if_name] ip_addr

The default interface is “inside.” If an interface other than inside is used, a security warning like the one shown in the next example appears, but the entry will be accepted.

The following example shows a simple configuration:

Pix(config)# snmp-server host 192.168.1.3
Pix(config)# snmp-server host dmz 192.168.2.3 trap
Warning: Sending SNMP traps to a non-inside interface may be insecure
Pix(config)#