SNMP management for IPv6

As with SNMP for IPv4, you can manage a switch via SNMP from an IPv6-based network management station by using an application such as HP PCM or HP PCM+. (For more information on PCM and PCM+, go to the HP Switch Networking web site at http://www.hp.com/networking/support.)

SNMP features supported

The same SNMP for IPv4 features are supported over IPv6:

  • Access to a switch using SNMP version 1, version 2c, or version 3

  • Enhanced security with the configuration of SNMP communities and SNMPv3 user-specific authentication password and privacy (encryption) settings

  • SNMP notifications, including:

    • SNMP version 1 or SNMP version 2c traps

    • SNMPv2c informs

    • SNMPv3 notification process, including traps

  • Advanced RMON (remote monitoring) management

  • HP PCM or HP PCM+ management applications

  • Flow sampling using sFlow

  • Standard MIBs, such as the Bridge MIB (RFC 1493) and the Ethernet MAU MIB (RFC 1515)

SNMP configuration commands supported

For more information on each SNMP configuration procedure, see the current Management and Configuration Guide for your switch.

SNMPv1 and V2c

Syntax:

snmp-server host <ipv4-addr|ipv6-addr> <community-name> [ none | all | non-info | critical | debug] [inform [retries <count> ] [timeout <interval> ]]

Executed at the global config level to configure an SNMP trap receiver to receive SNMPv1 and SNMPv2c traps, SNMPv2c informs, and (optionally) Event Log messages.

SNMPv3

Syntax:

snmpv3 targetaddress <name> params <params_name>

<ipv4-addr|ipv6–addr>

[ addr–mask <ipv4–addr> ]

[ filter < none | debug | all | not–info | critical > ]

[ max–msg–size <484–65535> ]

[ port–mask <tcp–udp port> ]

[ retries <0–255> ]

[ taglist <tag_name> ]

[ timeout <0–2147483647> ]

[ udp–port <port–number> ]

Executed at the global config level to configure an SNMPv3 management station to which notifications (traps and informs) are sent.

IPv6 is not supported in the configuration of an interface IPv6 address as the default source IP address used in the IP headers of SNMP notifications (traps and informs) or responses sent to SNMP requests. Only IPv4 addresses are supported in the following configuration commands:

snmp–server trap–source < ipv4–addr | loopback <0–7>>

snmp–server response–source [dst–ip–of–request | ipv4–addr | loopback <0–7> ]

IPv6 addresses are supported in SNMP show command output, as shown in Output of show snmp-server command with IPv6 address and Output of show snmpv3 targetaddress command with IPv6 address.

The show snmp–server command displays the current SNMP policy configuration, including SNMP communities, network security notifications, link-change traps, trap receivers (including the IPv4 or IPv6 address) that can receive SNMPv1 and SNMPv2c traps, and the source IP (interface) address used in IP headers when sending SNMP notifications (traps and informs) or responses to SNMP requests.

Output of show snmp-server command with IPv6 address

HP Switch(config)# show snmp-server

 SNMP Communities

  Community Name       MIB View Write Access
  –––––––––––––––––––– –––––––– ––––––––––––
  public               Manager  Unrestricted
  marker               Manager  Unrestricted

 Trap Receivers

  Link–Change Traps Enabled on Ports [All] : All

  Traps Category                  Current Status
  ––––––––––––––––––––––––––––    –––––––––––––––
  SNMP Authentication           : Extended
  Password change               : Enabled
  Login failures                : Enabled
  Port–Security                 : Enabled
  Authorization Server Contact  : Enabled
  DHCP–Snooping                 : Enabled
  Dynamic ARP Protection        : Enabled

  Address               Community Events   Type Retry Timeout
  ––––––––––––––––––––– ––––––––– –––––––– –––– ––––– –––––––
  15.29.17.218          public    All      trap 3     15
  15.29.17.219          public    Critical trap 3     15
  2620:0000:0260:0211
  :0217:a4ff:feff:1f70  marker    Critical trap 3     15

 Excluded MIBs

  Snmp Response Pdu Source–IP Information

   Selection Policy : rfc1517

Note: An IPv6 address is displayed on two lines.

The show snmpv3 targetaddress command displays the configuration (including the IPv4 or IPv6 address) of the SNMPv3 management stations to which notification messages are sent.

Output of show snmpv3 targetaddress command with IPv6 address

HP Switch(config)# show snmpv3 targetaddress

 snmpTargetAddrTable [rfc2573]

  Target Name      IP Address              Parameter
  –––––––––––––––– ––––––––––––––––––––––– ––––––––––
  1                15.29.17.218            1
  2                15.29.17.219            2
  PP.217           15.29.17.217            marker_p
  PP.218           2620:0:260:211
                      :217:a4ff:feff:1f70  marker_p

Note: An IPv6 Address is displayed on two lines