Start Demo

Set up shared SNMP credentials for your NetFlow or sFlow networks

If you enable SNMP polling on your flow network configuration, you must specify the credentials that allow you to poll the network device. The SNMP authentication credentials apply to all flow networks in a CIDR block and are automatically applied to every discovered flow network unless custom credentials are configured.

  1. Log in to the Administration settings on the ExtraHop system through https://<extrahop-hostname-or-IP-address>/admin.
  2. In the Network Settings section, click Flow Networks.
  3. In the Shared SNMP Credentials section, click Add SNMP Credentials.
  4. In the CIDR field, type the IPv4 CIDR block.
    For example, type 10.0.0.0/8 to match any IP address that starts with 10 or 10.10.0.0/16 to match any IP address that starts with 10.10. You cannot configure an IP address to match all traffic.
  5. From the SNMP version drop-down list, select v1, v2c, or v3.
  6. Configure additional fields specific to the selected SNMP version:
    • If you selected v1 or v2c, in the Community string field, type the community name.
    • If you selected v3, complete these fields, as required:
      Security name
      Type the username provided for authentication. This field is required.
      Security level
      Select the SNMPv3 security model and level from one of these options:
      • authPriv - Supports an SNMPv3 user with both authentication and encryption
      • authNoPriv - Supports an SNMPv3 user with only authentication and no encryption
      • noAuthNoPriv - Supports an SNMPv3 user without authentication and encryption
      Authentication type
      Select the authentication type from one of these options:
      • MD5
      • SHA
      Authentication key
      Type the authentication password or digest for the user.
      Privacy type
      Select the data encryption standard from one of these options:
      • AES
      • DES
      Privacy key
      Type the encryption key for the user.
  7. Click Save.

Manually refresh SNMP information

You can poll and retrieve data on demand from the SNMP agent on a flow network device. Instead of waiting for automatic polling to occur after each configuration change to confirm that the change is correct (automatic polling occurs every 24 hours), you can poll immediately.
  1. Log in to the Administration settings on the ExtraHop system through https://<extrahop-hostname-or-IP-address>/admin.
  2. In the Actions column for the approved flow network, click Poll.
    The ExtraHop system polls for the following information:
    • The system name of the SNMP agent. This identifier is assigned by SNMP to the flow network. OID: 1.3.6.1.2.1.1.5.0.
    • The interface name of each interface on the SNMP agent. These identifiers are for each flow interface on the flow network. OID: 1.3.6.1.2.1.2.2.1.2.
    • The interface speed of each interface on the SNMP agent. OID: 1.3.6.1.2.1.2.2.1.5 and 1.3.6.1.2.1.31.1.1.1.15.
Last modified 2024-07-16