# Basic SNMP information
set snmp location "JUNIPER-SRX240"
set snmp contact "IT ServiceDesk (IT.ServiceDesk@company.com)"
# SNMP read-only communitiy with restricted source network
set snmp community public authorization read-only
set snmp community public clients 10.10.10.0/24
set snmp community public clients 0.0.0.0/0 restrict
# SNMP read-write communitiy with restricted source network
set snmp community private authorization read-write
set snmp community private clients 10.10.10.0/24
set snmp community private clients 0.0.0.0/0 restrict
# Enable SNMP Access on the interface other than the management port
set security zones security-zone trust host-inbound-traffic system-services snmp
# (Optional) For SNMP Debugging - use "show log snmptrace"
set snmp traceoptions file snmptrace
set snmp traceoptions flag all
In Juniper SRX cluster firewalls, we have always managed to poll the SNMP information thru the management port. In ourcluster, we have interface fxp0 as the management interface. Basic SNMP configuration can be easily found from Juniper support site. Below is a simple configuration.
I have been using HPE IMC (Intelligent Management Center) for quite awhile and have been using it to fit my needs in my daily network operations activities. One of them is receiving emails notifications when a device/network goes offline and recovers.
By default, IMC generates alarms for devices which are detected to have faults. In IMC 7.x, it uses a number of monitors to check on the health of a device. This include ICMP, SNMP (polling, traps), Syslog among other things. For ICMP (Ping) packets, it generates an alarm when the "device does not respond to Ping packets". However, when the devices "recovers" meaning it now responds back to the ICMP echo request by default IMC does NOT generate notifications for these recovered devices. In network monitoring, it is very essential to know when a network is suddenly not reachable, it should notify back when it comes back online (i.e. power restored, network no longer congested). This is very important especially when monitoring a number of devices.
Kindly refer to this Post from Linsay Hill in configuring HPE IMC for Email Alerts as well as getting getting Emails Notifications for Recovered Alarms. This post is provided for version lower than IMC 7.x. which will augment the above URL this with my current Setup.
A Certified Geek who blogs anything geeky he comes across mostly in Linux and Networking.