How to enable SNMP on XGS2220?

Livi0

Hey

I have problems to Activate SNMP Traps on my XGS2220.

My Setup:

I have a Stack with 3x XGS2220 Switches. The Switches are in a Management Network. The SNMP Manager (Trap reciever) are in another Network. Between the Network is a Firewall, where i allow SNMP Traffic.

My Configuration:

The PRTG / SNMP Manager can make Get-Request to the switch with SNMP v3.

The SNMP Manager can only recieve SNMPv2 Traps. Because of that i switched the Trap Destination Version to v2. On The Firewall i can't see any Traffic from the Switch to the SNMP Manager.

In the Dashboard, i can see that the SNMP Status is set to OFF. I don't know why…

In Service AccessControl I activated SNMP.

Problem:

When i set the General SNMP Settings to SNMP Version 2 everything is working. If i set this to Version 3 the Traps don't work anymore… I can't see SNMP Traps Traffic on the firewall. On the Overview i can see that the SNMP Status is Off. Why?

Zyxel_Melen

Hi @Livi0,

Thanks for pointing it out. Since the SNMP general setting enables SNMP V3 only, the SNMP trap won't work with the V2c setting. Please change the SNMP general setting from V3 to V3V2c.

This enables SNMP V3 and V2c at the same time. And the SNMP trap V2c will work.

Zyxel_Melen

Hi @Livi0,

This is a bug. When you enable SNMP on the Service Access Control page, the SNMP will turn off. Please disable SNMP on the Service Access Control page to turn on SNMP.
The screenshots below are the configuration and result I tested in my lab:

Apologize for the inconvenience.

Livi0

Hi @Zyxel_Melen

Thanks for your fast reply.

When i turn SNMP in Service Acces Controll off, the SNMP Status in the Overview shows "ON". Just like you said. But my SNMP v3 GET request form the SNMP Manager gets blocked and the Traps still dons't work.

I think the Bug is just in the Overview site, where it shows the oposit status. So when it shows "on" it is actualy turned off…

Livi0

Hi @Zyxel_Melen

I did some more tests.

As soon i switch the SNMP settings to Version v2c the Traps starting to working…

In the Overview the the SNMP Status still shows "off"

(SNMP in Service Access Control is still activated)

Zyxel_Melen

Hi @Livi0,

My previous reply has some mistakes, please allow me to rephrase the reply.
This is a display bug. It occurs when you enable the SNMP on the access control page. But the SNMP function is certainly activated.
I can use SNMP v3 to get switch information in my lab. The below screenshots are my configuration and result.
SNMP setting:

SNMP User setting:

Result:

To better clarify your problem, could you help back up your switch configuration for me to check?
Please share the configuration in the private message I sent to you. Thanks in advance.

Zyxel_Melen

Hi @Livi0,

Thanks for the configuration. After checking, I found you missed the trap username setting. I can trap device information with the below configuration:

SNMP trap Destination:

Result:

Please configure the username and try again. And feel free to let me know if there are still any problems.

Livi0

Hi @Zyxel_Melen

When I'm only using SNMP V3 or only SNMP V2 everything is working fine. But when im mixing the Versions of SNMP it doesn't work.

I want to use SNMP v3 for get requests and SNMP v2 for Traps. I tried with and without a username. Both without success.

As far as I know, SNMP v2 doesn't require a username, just a community string, right?

Zyxel_Melen

Hi @Livi0,

Thanks for pointing it out. Since the SNMP general setting enables SNMP V3 only, the SNMP trap won't work with the V2c setting. Please change the SNMP general setting from V3 to V3V2c.

This enables SNMP V3 and V2c at the same time. And the SNMP trap V2c will work.

Livi0

Hi @Zyxel_Melen

Thanks for your response. It works now, thanks for your help.