Supermicro L2 User manual

--
L2 / L3 Switches
Simple Network Management Protocol
(SNMP)
Configuration Guide
Revision 1.0

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
2

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
3
The information in this USER’S ANUAL has been carefully reviewed and is believed to be accurate. The vendor
assumes no responsibility for any inaccuracies that may be contained in this document, makes no commitment to
update or to keep current the information in this manual, or to notify any person organization of the updates.
Please Note: For the most up-to-date version of this manual, please see our web site at www.supermicro.com.
Super icro Computer, Inc. (“Supermicro”) reserves the right to make changes to the product described in this
manual at any time and without notice. This product, including software, if any, and documentation may not, in
whole or in part, be copied, photocopied, reproduced, translated or reduced to any medium or machine without
prior written consent.
IN NO EVENT WILL SUPER ICRO BE LIABLE FOR DIRECT, INDIRECT, SPECIAL, INCIDENTAL, SPECULATIVE OR
CONSEQUENTIAL DA AGES ARISING FRO THE USE OR INABILITY TO USETHIS PRODUCT OR DOCU ENTATION,
EVEN IF ADVISED OF THE POSSIBILITY OF SUCHDA AGES. IN PARTICULAR, SUPER ICRO SHALL NOT HAVE
LIABILITY FOR ANY HARDWARE,SOFTWARE, OR DATA STORED OR USED WITH THE PRODUCT, INCLUDING THE
COSTS OFREPAIRING, REPLACING, INTEGRATING, INSTALLING OR RECOVERING SUCH HARDWARE,SOFTWARE, OR
DATA.
Any disputes arising between manufacturer and customer shall be governed by the laws of Santa Clara County in
the State of California, USA. The State of California, County of Santa Clara shall be the exclusive venue for the
resolution of any such disputes. Super icro's total liability for all claims will not exceed the price paid for the
hardware product.
FCC Statement: This equipment has been tested and found to comply with the limits for a Class A digital device
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference when the equipment is operated in a commercial environment. This equipment generates, uses, and
can radiate radio frequency energy and, if not installed and used in accordance with the manufacturer’s instruction
manual, may cause harmful interference with radio communications. Operation of this equipment in a residential
area is likely to cause harmful interference, in which case you will be required to correct the interference at your
own expense.
California Best anagement Practices Regulations for Perchlorate aterials: This Perchlorate warning applies only
to products containing CR ( anganese Dioxide) Lithium coin cells. Perchlorate aterial-special handling may
apply. See http://www.dtsc.ca.gov/hazardouswaste/perchlorate/ for further details.
anual Revision 1.0
Release Date: August 15, 2013
Unless you request and receive written permission from Super icro Computer, Inc., you may not copy any part of
this document.
Information in this document is subject to change without notice. Other products and companies referred to
herein are trademarks or registered trademarks of their respective companies or mark holders.
Copyright © 2013 by Super icro Computer, Inc.
All rights reserved.
Printed in the United States of America

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
4
Contents
1 SN P Configuration Guide ................................................................................................................... 5
1.1 SN P Basics .................................................................................................................................. 5
1.2 SN P Support ............................................................................................................................... 7
1.3 Interface Numbers ........................................................................................................................ 8
1.4 SN P Defaults .............................................................................................................................. 9
1.5 Enable/Disable SN P Agent ....................................................................................................... 10
1.6 Access control ............................................................................................................................. 10
1.6.1 Engine Identifier .................................................................................................................. 11
1.6.2 Community .......................................................................................................................... 12
1.6.3 User ..................................................................................................................................... 13
1.6.4 Group .................................................................................................................................. 15
1.6.5 View..................................................................................................................................... 17
1.6.6 Group Access ....................................................................................................................... 19
1.7 Trap ............................................................................................................................................. 21
1.7.1 Target Address .................................................................................................................... 21
1.7.2 Target Parameters .............................................................................................................. 22
1.7.3 SN P Notify ........................................................................................................................ 24
1.7.4 Trap UDP Port ..................................................................................................................... 26
1.7.5 Authentication traps ........................................................................................................... 27
1.8 Sub-Agent .................................................................................................................................... 27
1.9 SN P configuration example ..................................................................................................... 29

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
5
1SNMP Configuration Guide
This document describes the Simple Network anagement Protocol (SN P) feature supported in
Supermicro Layer 2 / Layer 3 switch products.
This document covers the SN P configurations for the Supermicro switch products listed below.
The majority of this document applies to all the above listed Supermicro switch products. The content of
any particular sub section however, might vary across these switch product models. In those sections
the differences are clearly identified with reference to particular switch product models. If any particular
switch product model is not referenced, the reader can safely assume that the content is applicable to
all the above listed models.
Throughout this document, the common term “switch” refers to any of the above listed
Supermicro switch product models unless a particular switch product model is noted.
1.1 SNMP Basics
SN P helps to monitor and manage the switches from network management systems (N S). SN P
solutions contain three major components – SN P manager, SN P agent and IB ( anagement
Information Base) as shown in Figure – SN P-1.
The SN P IB contains all the configuration and status information of the switch. IB is organized in a
tree structure with branches and leaf nodes. Each node contains an object of information and is
identified with an object identifier (OID). SN P IB is stored and maintained in the switch.
Top of Rack Switches
• SSE-G24-TG4
• SSE-G48-TG4
• SSE-X24S
• SSE-X3348S
• SSE-X3348T
Blade Switches
• SB -GE -X2C
• SB -GE -X2C+
• SB -GE -X3S+
• SB -XE -X10S

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
6
The SN P agent also resides on the switch. It processes the SN P requests received from the SN P
manager. It sends responses to SN P managers by retrieving required information from the IB. It also
updates the IB based on SN P messages sent by the SN P managers. SN P agents also send
voluntary traps to SN P managers. Traps are sent to alert the SN P managers on events happening on
the switch.
The SN P manager is an N S application. It monitors and manages switches by communicating to the
SN P agents running on the switch. The SN P manager application provides command or graphical
interfaces to the network administrators to help them manage the networks.
There are three versions of SN P protocols available.
US (User based Security odel) and VAC (View based Access Control odel) are the main features
in SN Pv3. US provides user authentication and message encryption. VAC provides IB access
control by associating views and users.
SN Pv3 uses a combination of security model and security level to define switch access. Security model
specifies the authentication mechanism for the user and the group to which the user belongs. The
security models in the Supermicro switch are v1, v2c and v3.
SN P
anager
MIB
SNMP
AGENT
Switch
SN P essages
Figure SNMP-1: SNMP S stems
SNMPv2c
SNMPv1
First version
of SNMP
protocol
* Improvements over SNMPv1
* Communit string based administration
* 64 bit counters support
* getbulk support to retrieve large info
* Introduced inform messages
* Improved error handling
SNMPv3
Improvements over
SNMPv2c
Improved authentication -
based on SNMP engine ID
Improved securit -
encr pted information

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
7
Security level specifies the permitted security within the particular security model. The security levels in
Supermicro switches are
•NoAuthNoPriv
•AuthNoPriv
•AuthPriv
The security model and level combinations possible in Supermicro switch are listed in the table below.
Security
odel
Security Level
Authentication
Encryption
Purpose
V1 noAuthNoPriv Community string None
Community string and
community user are used to
authenticate user login.
V2c noAuthNoPriv Community string None
Community string and
community user are used to
authenticate user login.
V3 noAuthNoPriv User name None
User configuration is used to
authenticate user login.
V3 Auth D5 or SHA None
D5 or SHA algorithm is
used to verify user login.
V3 Priv None DES
DES is used to encrypt all
SN P messages.
SN P uses multiple messages between managers and agents. The below table describes the SN P
messages.
essage Type
Originator
Receiver
Purpose
get
-
request
anager
Agent
To
get the value of a particular IB object
get
-
next
-
request
anager
Agent
To get the value of the next object in
a table
get-bulk-request anager Agent
To get the value
s
of
multiple
IB object
s in
one transaction
get-response Agent aster
Response for
get
-
request, get
-
next
-
request
and get-bulk-request messages.
s
et
-
request
anager
Agent
To
set
the value of a particular IB object
T
rap
Agent
aster
To notify the events occurring on agents
Inform
Agent
aster
To guarantee
delivery of
traps to anager
1.2 SNMP Support
Supermicro switches support three versions of SN P: SN Pv1, SN Pv2c and SN Pv3.
A switch supports 50 users, 50 groups, 50 views and 50 views.

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
8
1.3 Interface Numbers
IF- IB contains information about all the interfaces on the switch. Users can access the interface
specific IB object values using interface index (ifIndex) numbers. The ifIndex numbers are assigned by
switch software for every physical and logical interface. The table below shows ifIndex to interface
mapping method.
Inter
face T pe
ifIndex
1Gig physical interfaces
Start
s
from 1 and goes up
to
the
maximum number of 1Gig interfaces
available on the switch.
For SSE-G24-TG4, SB -GE -X2C, SB -GE -X2C+, SB -GE -X3S+: 1 to 24
For SSE-G48-TG4: 1 to 48
For SSE-X24S and SB -XE -X10S: 1
For SSE-X3348S: 1 to 2
For SSE-X3348T: 1 to 2
10Gig physical interfaces
Start
s
after 1Gig ifIndexes and goes up to
the
maximum number of 10Gig
interfaces available on the switch.
For SSE-G24-TG4, SB -GE -X2C, SB -GE -X2C+, SB -GE -X3S+: 25 to 28
For SSE-G48-TG4: 49 to 52
For SSE-X24S and SB -XE -X10S: 2 to 25
For SSE-X3348S: 3 to 50
For SSE-X3348T: 3 to 50
40Gig physical interfaces
Start
s
g after 10Gig ifIndexes and goes up to
the
maximum number of 40Gig
interfaces available on the switch.
For SSE-X3348S: 51 to 54
For SSE-X3348T: 51 to 54
Port channel interfaces
Start
s
after 10Gig / 40Gig ifIndexes and goes up to
the
maximum number of
port channel interfaces supported on the switch.
For SSE-G24-TG4, SB -GE -X2C, SB -GE -X2C+, SB -GE -X3S+: 29 to 52
For SSE-G48-TG4: 53 to 76
For SSE-X24S and SB -XE -X10S: 26 to 49
For SSE-X3348S: 55 to 78
For SSE-X3348T: 55 to 78
Layer 3 interfaces
Start
s
after port channel ifIndexes and goes up to
the
maximum number of
layer 3 interfaces supported on the switch.
On switch models SSE-G24-TG4, SSE-G48-TG4, SSE-X24S, SSE-X3348S and
SSE-X3348T, the default VLAN 1 and stacking VLAN 4069 takes the first two
layer 3 ifIndexes.
On switch models SB -GE -X2C, SB -GE -X2C+, SB -GE -X3S+ and
SB -XE -X10S, the first three layer 3 ifIndexes are assigned for C 1 IP
interface, C 2 IP interface and stacking VLAN 4069.
User created layer 3 interfaces follow the above ifIndexes.

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
9
In stacking cases, the port channel interface ifIndex starts after the physical interfaces of all the stack
switches. The ifIndexes for all the stack physical interfaces are assigned irrespective of the presence of
the particular member switch.
1.4 SNMP Defau ts
Function Default Value
SN P Agent
S
tatus
Enabled
SN P Sub
-
Agent
S
tatus
Disabled
Version
3
Engine Id
80.00.08.1c.04.46.53
Communities
PUBLIC
,
NET AN
Users
i
nitial,
Template D5,
TemplateSHA
Authentication
(for default users)
initial : none
Template D5: D5
TemplateSHA: SHA
Privacy
(for default users)
initial : none
Template D5: none
TemplateSHA: DES
Groups
iso,
initial
Access
iso,
initial
View (for default groups)
iso:
iso,
initial: restricted
Notify View Name
iss,
iss1
Read, Write, Notify
I
so
Target Parameters
Internet,
test1
Storage
T
ype
Volatile
Context
None
SN P Port
161
SN P Trap
P
ort
162
Trap
S
tatus
Enabled
Authentication Trap
Disabled
Switch 0
1G | 10G | 40G
Switch 1
1G | 10G | 40G
Switch 2 to Switch 16
Similar to Switch 0 and 1
Port
Channel
La er 3
Interfaces

SNMP Configuration Guide
Supermicro L2/L3 Switches Configuration Guide
10
1.5 Enab e/Disab e the SNMP Agent
The SN P Agent is enabled by default in Supermicro switches.
Follow the steps below to disable the SN P agent.
Step Command Description
Step 1
configure terminal
Enters the configuration mode
Step 2
disable snmpagent
Disables the
SN P agent
Step 3
end
Exits the configuration mode.
Step 4
show
snmp
Displays the
SN P
information.
Step 5
write startup
-
config
Optional step
–
saves this
SN P
configuration to be part of the startup
configuration.
The
“
enable
snmp
agent
”
command
enables the
SN P
agent
.
To enable the SN P agent, it must be in the disabled state. The SN P subagent is disabled
by default. If needed, use the command “disable snmp subagent” to disable the SN P
subagent feature.
The examples below show ways to disable/enable the SN P agent function on Supermicro switches.
Disable the SNMP agent.
S IS# configure terminal
S IS(config)# disable snmpagent
S IS(config)# end
Enable the SNMP agent.
S IS# configure terminal
S IS(config)# enable snmpagent
S IS(config)# end
1.6 Access Contro
There are various parameters that control access to the SN P Agent.
•Engine ID