How to enable SNMP on XGS2220?

Livi0
Livi0 Posts: 5
Friend Collector First Comment
edited December 2023 in Switch

Hey

I have problems to Activate SNMP Traps on my XGS2220.

My Setup:

I have a Stack with 3x XGS2220 Switches. The Switches are in a Management Network. The SNMP Manager (Trap reciever) are in another Network. Between the Network is a Firewall, where i allow SNMP Traffic.

My Configuration:

The PRTG / SNMP Manager can make Get-Request to the switch with SNMP v3.

The SNMP Manager can only recieve SNMPv2 Traps. Because of that i switched the Trap Destination Version to v2. On The Firewall i can't see any Traffic from the Switch to the SNMP Manager.

In the Dashboard, i can see that the SNMP Status is set to OFF. I don't know why…

In Service AccessControl I activated SNMP.

Problem:

When i set the General SNMP Settings to SNMP Version 2 everything is working. If i set this to Version 3 the Traps don't work anymore… I can't see SNMP Traps Traffic on the firewall. On the Overview i can see that the SNMP Status is Off. Why?

Accepted Solution

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,095  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments
    edited December 2023 Answer ✓

    Hi @Livi0,

    Thanks for pointing it out. Since the SNMP general setting enables SNMP V3 only, the SNMP trap won't work with the V2c setting. Please change the SNMP general setting from V3 to V3V2c.

    This enables SNMP V3 and V2c at the same time. And the SNMP trap V2c will work.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,095  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments

    Hi @Livi0,

    This is a bug. When you enable SNMP on the Service Access Control page, the SNMP will turn off. Please disable SNMP on the Service Access Control page to turn on SNMP.
    The screenshots below are the configuration and result I tested in my lab:

    Apologize for the inconvenience.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


  • Livi0
    Livi0 Posts: 5
    Friend Collector First Comment
    edited December 2023

    Hi @Zyxel_Melen

    Thanks for your fast reply.

    When i turn SNMP in Service Acces Controll off, the SNMP Status in the Overview shows "ON". Just like you said. But my SNMP v3 GET request form the SNMP Manager gets blocked and the Traps still dons't work.

    I think the Bug is just in the Overview site, where it shows the oposit status. So when it shows "on" it is actualy turned off…

  • Livi0
    Livi0 Posts: 5
    Friend Collector First Comment

    Hi @Zyxel_Melen

    I did some more tests.

    As soon i switch the SNMP settings to Version v2c the Traps starting to working…

    In the Overview the the SNMP Status still shows "off"

    (SNMP in Service Access Control is still activated)

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,095  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments
    edited December 2023

    Hi @Livi0,

    My previous reply has some mistakes, please allow me to rephrase the reply.
    This is a display bug. It occurs when you enable the SNMP on the access control page. But the SNMP function is certainly activated.
    I can use SNMP v3 to get switch information in my lab. The below screenshots are my configuration and result.
    SNMP setting:

    SNMP User setting:

    Result:

    To better clarify your problem, could you help back up your switch configuration for me to check?
    Please share the configuration in the private message I sent to you. Thanks in advance.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


  • Zyxel_Melen
    Zyxel_Melen Posts: 2,095  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments

    Hi @Livi0,

    Thanks for the configuration. After checking, I found you missed the trap username setting. I can trap device information with the below configuration:

    SNMP trap Destination:

    Result:

    Please configure the username and try again. And feel free to let me know if there are still any problems.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


  • Livi0
    Livi0 Posts: 5
    Friend Collector First Comment

    Hi @Zyxel_Melen

    When I'm only using SNMP V3 or only SNMP V2 everything is working fine. But when im mixing the Versions of SNMP it doesn't work.

    I want to use SNMP v3 for get requests and SNMP v2 for Traps. I tried with and without a username. Both without success.

    As far as I know, SNMP v2 doesn't require a username, just a community string, right?

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,095  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments
    edited December 2023 Answer ✓

    Hi @Livi0,

    Thanks for pointing it out. Since the SNMP general setting enables SNMP V3 only, the SNMP trap won't work with the V2c setting. Please change the SNMP general setting from V3 to V3V2c.

    This enables SNMP V3 and V2c at the same time. And the SNMP trap V2c will work.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


  • Livi0
    Livi0 Posts: 5
    Friend Collector First Comment

    Hi @Zyxel_Melen

    Thanks for your response. It works now, thanks for your help.