MetroCluster Manuals ( CA08871-401 )

Configure MetroCluster IP switches for health monitoring

In MetroCluster IP configurations, you can configure SNMPv3 to monitor the health of IP switches.

Step 1: Configure the SNMPv3 user on MetroCluster IP switches

Use the following steps to configure the SNMPv3 user on the MetroCluster IP switches.

You must use both the authentication and privacy protocols in the commands. Using authentication without privacy is not supported.

For Broadcom IP switches

Steps

If the 'network-admin' user group doesn’t already exist, create it:

(IP_switch_1) (Config)# snmp-server group network-admin v3 auth read "Default"
Confirm the 'network-admin' group has been created:

(IP_switch_1) (Config)# show snmp group

Configure the SNMPv3 user on Broadcom IP switches:

(IP_switch_1)# config
(IP_switch_1) (Config)# snmp-server user <user_name> network-admin [auth-md5/auth-sha/noauth] "<auth_password>" [priv-aes128/priv-des] "<priv_password>"

You must use quotation marks around the authentication and privacy passwords, as shown in the following example:

snmp-server user admin1 network-admin auth-md5 "password" priv-des "password"

For Cisco IP switches

Steps

Run the following commands to configure the SNMPv3 user on a Cisco IP switch:

IP_switch_A_1 # configure terminal
IP_switch_A_1 (config) # snmp-server user <user_name>  auth [md5/sha/sha-256] <auth_password> priv (aes-128) <priv_password>

Verify that the SNMPv3 user is configured on the switch:

IP_switch_A_1(config) # show snmp user <user_name>

The following example output shows that the user admin is configured for SNMPv3:

IP_switch_A_1(config)# show snmp user admin
User                Auth      Priv(enforce) Groups              acl_filter

____                ____      _____________ ______              __________

admin               md5       aes-128(no)   network-admin

Step 2: Configure the SNMPv3 user in ONTAP

Use the following steps to configure the SNMPv3 user in ONTAP.

Configure the SNMPv3 user in ONTAP:

security login create -user-or-group-name <user_name> -application snmp -authentication-method usm -remote-switch-ipaddress <ip_address>
Configure switch health monitoring to monitor the switch using the new SNMPv3 user:

system switch ethernet modify -device <device_id> -snmp-version SNMPv3 -community-or-username <user_name>
Verify that the device serial number that will be monitored with the newly created SNMPv3 user is correct:
1. Display the switch health monitoring polling time period:
  
  system switch ethernet polling-interval show
2. Run the following command after the polling time period has elapsed:
  
  system switch ethernet show-all -instance -device <device_serial_number>