Monitor SNMP Trap

 

Updated: May 13, 2016

Applies To: System Center 2012 SP1 - Orchestrator, System Center 2012 - Orchestrator, System Center 2012 R2 Orchestrator

The Monitor SNMP Trap activity waits for an event to occur either in the Microsoft SNMP Trap Service, or on a port that you specify. Using filters, you can invoke your runbooks according to the device that raised the event or the enterprise, generic, or specific identifiers of the SNMP trap. Use the Monitor SNMP Trap activity to monitor a network device for critical errors, automatically create a trouble ticket, and perform level 1 diagnostics on the device.

Before you configure the Monitor SNMP Trap activity, you need to determine the following:

  • Version of SNMP that you are using

  • Source host IP address

  • Enterprise identifier of the device

  • Generic or specific identifier of the device that you are monitoring

Use the following information to configure the Monitor SNMP Trap activity.

Details Tab

SettingsConfiguration Instructions
Microsoft SNMP Trap Service (SNMPv1, SNMPv2c)Select this option to use the Microsoft SNMP Trap Service. This service is only compatible with SNMP versions SNMPv1 and SNMPv2c.
No dependency (SNMPv1, SNMPv2c, SNMPv3)Select this option to monitor SNMP traps using a port rather than the Microsoft SNMP Trap Service.
PortIf you select the No dependency option, type the communication port number that will be monitored for SNMP traps. If you select port 162, the Microsoft SNMP Trap Service must be disabled because it uses the same port when it runs.
Source hostSelect to specify the IP address of the device where the event originates.
Enterprise identifierSelect to specify the enterprise identifier of the event raised by the device.
Generic identifierSelect to specify the generic identifier of the SNMP trap. There are six options available:

 coldStart(0): Select to filter for a cold start of the network device. This option has a numerical value of 0.

 warmStart(1):Select to filter for a warm start of the network device. This option has a numerical value of 1.

 linkDown(2): Select to filter for a severed connection to the network device. This option has a numerical value of 2.

 linkUp(3): Select to filter for a re-established connection to the network device. This option has a numerical value of 3.

 authenticationFailure(4): Select to filter for a failed SNMP authentications to the network device. This option has a numerical value of 4.

 egpNeighborLoss(5): Select to filter for a lost connection to an EGP neighbor. This option has a numerical value of 5.

 enterpriseSpecific(6): Select to filter based on an enterprise specific ID. This option has a numerical value of 6. You must specify this option to filter based on a Specific identifier.
Specific identifierSelect to specify an enterprise specific identifier for the SNMP trap. This setting becomes active when you select the enterpriseSpecific(6) option in the Generic identifier box.

Published Data

The following table lists published data items.

ItemDescription
Source IP addressThe IP address of the device where the trap originated.
Enterprise IdThe enterprise ID of the trap.
Generic IdThe generic ID of the trap.
Specific IdThe specific ID of the trap. The value of the specific identifier is published when using the enterpriseSpecific(6) option of the Generic identifier box. Otherwise, a value of 0 (zero) is published.
Trap portThe port where the trap was received.
Varbind countThe number of variable bindings received.
SNMP VersionThe SNMP version specified for this trap.
Show: