How to Configure SNMPv2 on the Palo Alto Networks Firewall

Overview

This document explains how to configure SNMPv2 on the Palo Alto Networks firewall.

Steps

1. Begin by configuring the SNMP trap server profile.
   1. Go to Device > Server Profiles
   2. Click the SNMP Trap link
   3. Click the Add button to add a server and choose the version
   4. The following fields need to be filled in:
      Server:  SNMPtrap destination name (up to 31 characters).
      Manager:  Specify the IP address of the trap destination.
      Community:  Specify the community string required to send traps to the specified destination (default is public).
      
2. Go to Setup under the Device.
   1. In the lower right corner, click SNMP Setup.
      
3. When the SNMP setup appears, enter the following criteria:
   1. Physical:  Location Specify the physical location of the firewall.
      Exp. Santa Clara
   2. Contact:  Enter the name or email address of the person responsible for maintaining the firewall.
      This setting is reported in the standard system information MIB
   3. Use Event-Specific Trap Definitions: Check the box to use a unique OID for each SNMP trap based on the event type.
      (Default is selected)
   4. Version: Select the SNMP version (V2c or V3). This setting controls access to the MIB information.
      By default, V2c is selected with the “public” community string.
      For V2c, configure the following setting:
             SNMP Community String: Enter the SNMP community string for firewall access (default is Public).
      
4. Configure log forwarding:
   1. Click on the Device tab and open up the Log Settings folder. Choose the log from which to send traps.
   2. Choose the log severity to trap
      
5. When the severity window appears, use the drop down menu to choose the SNMP server profile to send the traps
   
6. Enable SNMP service on management interface:
   1. Go to the Device tab and then Setup
   2. Click the Management Link
   3. Click the Management Interface Settings button
   4. Check the SNMP box
      
      Note: If using an interface apart from Management, please make sure that the Interface Management profile associated with the Interface has SNMP enabled.
7. Commit the changes to see the traps being sent to the SNMP server from the management port.

owner:  nayubi