An engineer must monitor a Cisco ACI fabric with SNMP. The “permit any contract” attribute is not configured in the fabric. Which action must be taken to receive SNMP traps from Cisco APIC?
An engineer must monitor a Cisco ACI fabric with SNMP. The “permit any contract” attribute is not configured in the fabric. Which action must be taken to receive SNMP traps from Cisco APIC?
To receive SNMP traps from the Cisco Application Policy Infrastructure Controller (APIC) in a Cisco ACI fabric without the 'permit any contract' attribute configured, it is necessary to ensure that the relevant traffic can pass through the fabric. SNMP traps typically use UDP port 162. By adding the UDP filter port 162 to the existing out-of-band (OOB) contract, the necessary traffic for SNMP traps will be allowed, thereby enabling monitoring of the Cisco ACI fabric through SNMP.
Pre-requisites 1. To allow SNMP communications, you must configure an "out-of-band (OOB) contract" in the "mgmt" tenant to allow SNMP traffic. SNMP traffic typically uses UDP port 161 for SNMP requests. 2. Configure the APIC OOB IP addresses in the "mgmt" tenant. Although the OOB addresses are configured during APIC setup, the addresses must be explicitly configured in the "mgmt" tenant before the OOB contract will take effect. About SNMP ACI provides SNMPv1, v2, and v3 support, including Management Information Bases (MIBs) and notifications (traps). The SNMP standard allows any third-party applications that support the different MIBs to manage and monitor the ACI fabric. https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/aci-guide-configuring-snmp.pdf
To monitor Cisco ACI fabric with SNMP, the APIC must be able to send SNMP traps to the external SNMP monitoring system. SNMP traps are sent over UDP port 162. If "permit any contract" is not configured, then explicit contracts must allow traffic from APIC to the external SNMP receiver. The APIC out-of-band (OOB) management network is typically used for SNMP monitoring.