Solved

Cisco ASA: SNMP traps for configuration changes

Posted on 2013-06-03
3
1,239 Views
Last Modified: 2013-06-05
Hello All,

Has anyone been able to get snmp-traps sent from an ASA that fire off on a configuration change?  I have what I thought would work but I don't see the traps coming into the snmp server.

snmp-server host snmpvlan 4.3.2.1 community *****
snmp-server enable traps entity config-change

Open in new window


Am I correct in thinking this is the correct syntax to reply on running-config changes?
Note:  I have the snmp-server device receiving  traps correctly on other devices (routers etc).

Thanks for your time!
0
Comment
Question by:NE_Tech_Dude
3 Comments
 
LVL 62

Assisted Solution

by:btan
btan earned 250 total points
ID: 39218924
may want to take a look at the full steps and run thru but it seems to state that ASA  "entConfigChange" trap is only generated when a security context is added/removed (multi-mode) or an SSM is inserted/removed (though OID is not officially supported).

http://www.cisco.com/en/US/docs/security/asa/asa72/system/message/logconf.html#wp1104110

hence, I saw another in solarwind forum using Cisco EEM applet (in addition to normal SNMP trap configuration). They are saying "snmp-server enable traps config" but seems to be of older version

http://thwack.solarwinds.com/thread/29526

Others....

SNMP MIBs and Traps on the ASA - Additional Information
https://supportforums.cisco.com/docs/DOC-1295#ENTITYMIB

Adaptive Security Appliance MIB Support List
ftp://ftp.cisco.com/pub/mibs/supportlists/asa/asa-supportlist.html
0
 
LVL 22

Accepted Solution

by:
eeRoot earned 250 total points
ID: 39220846
Rather then SNMP, you can use a syslog server to receive wr mem alerts.
0
 
LVL 2

Author Comment

by:NE_Tech_Dude
ID: 39223464
I think I'm going to handle this via AAA Accounting.  No trap for this is disappointing.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Nimble Storage 3 69
No Wireless Networks Visible In Windows 10 7 52
Failover VPN Question Sonicwall 5 33
When syspreping a clone machine 7 22
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question