Configuring SNMP

UTM-1 appliance users can monitor the UTM-1 appliance, using tools that support SNMP (Simple Network Management Protocol). You can enable users to do so via the Internet, by configuring remote SNMP access.

The UTM-1 appliance supports the following SNMP MIBs:

SNMPv2-MIB
RFC1213-MIB
IF-MIB
IP-MIB

All SNMP access is read-only.

Note: Configuring SNMP is equivalent to creating a simple Allow rule, where the destination is This Gateway. To create more complex rules for SNMP, such as allowing SNMP connections from multiple IP address ranges, define Allow rules for the relevant port (by default, TCP port 161), with the destination This Gateway. For information, see Using Rules.

To configure SNMP

Click Setup in the main menu, and click the Management tab.
The Management page appears.
Specify from where SNMP access should be granted.
See Access Options for information.

If you selected Internal Networks + IP Range, additional fields appear.

The Community field and the Advanced link are enabled.
If you selected Internal Networks + IP Range, enter the desired IP address range in the fields provided.
In the Community field, type the name of the SNMP community string.
SNMP clients uses the SNMP community string as a password, when connecting to the UTM-1 appliance.

The default value is "public". It is recommended to change this string.
To configure advanced SNMP settings, do the following:
1. Click Advanced.
  The SNMP Configuration page appears.
2. Complete the fields using the following table.
  If you selected the Send SNMP Traps check box, additional fields appear.
Click Apply.
The SNMP configuration is saved.
Configure the SNMP clients with the SNMP community string.

Advanced SNMP Settings

In this field...	Do this…
System Location	Type a description of the appliance's location. This information will be visible to SNMP clients, and is useful for administrative purposes.
System Contact	Type the name of the contact person. This information will be visible to SNMP clients, and is useful for administrative purposes.
SNMP Port	Type the port to use for SNMP. The default port is 161.
Send SNMP Traps	Select this option to enable sending SNMP traps. An SNMP trap is a notification sent from one application to another.
Send Traps On: Startup / Shutdown	Indicates that SNMP traps will automatically be sent upon startup/shutdown events. This option is always selected.
Send Traps On: SNMP Authentication Failure	Select this option to to send an SNMP trap on each SNMP authentication failure event.
Send Traps On: Link up/down	Select this option to send an SNMP trap on each link up/down event.
Trap Community	Type the SNMP community string of the trap receiver. The default value is public.
Trap Port	Type The UDP port of the trap receiver. The default value is 162.
Trap Destination	Type the IP address or DNS name of the SNMP trap receiver agent.
Trap Type	Select the type of SNMP traps to use.