Set up SNMPv3 Traps

General
1

Hello

I have just set up my CheckMK according to this post:
https://forum.checkmk.com/t/kein-empfang-von-snmp-traps-in-event-console/18872/5?u=dom_666
I have also made a Event Console Rule to catch all events matching the syslog facility “snmptrap”.
From the host I want to monitor, I can send test traps to the receiver.
But I don’t get any event.
(The host sending the traps is on a remotesite, I haave also tried sending the traps directly to the Master CheckMK Site, with the same result.)
I have Checked the firewall and the required Ports are all open.
I can also see traffic from the host to the CheckMK Server (UDP Port:162).

So I guess there is still something missing in my CheckMK config.

I want to use SNMPv3 Traps.

Thank you

1 Like
2

Hi @dom_666

Did you configured settings of event console ? Specially Credentials for processing SNMPTraps in EC Settings ?

image
image1055×549 28.1 KB

That’s might be what you’re missing.

3

Hi @ricardoftribeiro
Thanks for your reply.
Yes I did enter the credentials as mentioned.
I followed step by step the manual in the link from my question.

4

Is there a way to log failed snmp traps in checkmk?
The firewall on the checkmk server is inactive.

5

On the rule try this :

image
image922×436 8.72 KB

That would do the trick … :slight_smile:

6

This is not going to halp, as I already have a event console rule to catch any event.
I meant, if there is an error log from checkmk that shows what was sent to the server and maby blocked or handled in the wrong way.

I would also appreciate a step by step how to manual to setup SNMP trap handling in checkmk.

1 Like
7

Did you set the EngineID?

8

yes I did set the EngingID

1 Like
9

Can you try using SNMPv2 to start? They are easier to generate and catch. For SNMP Trap diagnosis I suggest starting with this command to check if traps are being received by your Checkmk Server:

tcpdump -i any udp port 162

10

If you have a local firewall installed in your operating system you need to allow traffic on UDP port 162. We had to do that in here for instance.