Setting up SNMP servers using the CLI

To set up the SNMP servers, perform the following subtasks:

Add the SNMP servers
Configure the SNMP servers

To add an SNMP server:

Go to CLI configuration mode:
hostname > enable
hostname # configure terminal
Enable SNMP notifications:
hostname (config) # fenotify snmp enable
Specify the name of the SNMP server (for example, NX7400) for SNMP notifications:
hostname (config) # fenotify snmp trap-sink <sink_name>
Specify which servers will receive SNMP notifications (one server per command):
hostname (config) # fenotify snmp trap-sink <sink_name> enable
Specify the IP address or DNS address of the SNMP server to receive the notifications:
hostname (config) # fenotify snmp trap-sink <sink_name> address <ip address>
Save the configuration.
hostname (config) # write memory

To configure the SNMP servers:

Go to CLI configuration mode:
hostname > enable
hostname # configure terminal
Enable SNMP notifications:
hostname (config) # fenotify snmp enable
Specify the SNMP community string
hostname (config) # fenotify snmp trap-sink <sink_name> community <community_name>
Specify the SNMP version used for notifications:
- To use SNMP version 1, enter:
  hostname (config) # fenotify snmp trap-sink <sink_name> version 1
- To use SNMP version 2c, enter:
  hostname (config) # fenotify snmp trap-sink <sink_name> version 2c
Specify the delivery frequency for SNMP notifications:
Note
Trellix recommends using per-event notifications.
- To receive a daily notification for each entity that was the source of the event, enter:
  hostname (config) # fenotify snmp trap-sink <sink_name> prefer message delivery daily-per-source
- To receive an hourly notification for each entity that was the source of the event, enter:
  hostname (config) # fenotify snmp trap-sink <sink_name> prefer message delivery hourly-per-source
- To receive a notification every minute for each entity that was the source of the event, enter:
  hostname (config) # fenotify snmp trap-sink <sink_name> prefer message delivery per-1min-per-source
- To receive a notification every 5 minutes for each entity that was the source of the event, enter:
  hostname (config) # fenotify snmp trap-sink <sink_name> prefer message delivery per-5min-per-source
- To receive information about each event, sent when the event is triggered, enter:
  hostname (config) # fenotify snmp trap-sink <sink_name> prefer message delivery per-event
Select the event type:
hostname (config) # fenotify snmp trap-sink <sink_name> prefer notification all-events
hostname (config) # fenotify snmp trap-sink <sink_name> prefer notification domain-match
hostname (config) # fenotify snmp trap-sink <sink_name> prefer notification infection-match
hostname (config) # fenotify snmp trap-sink <sink_name> prefer notification ips-event
hostname (config) # fenotify snmp trap-sink <sink_name> prefer notification malware-callback
hostname (config) # fenotify snmp trap-sink <sink_name> prefer notification malware-object
hostname (config) # fenotify snmp trap-sink <sink_name> prefer notification web-infection
Save the configuration:
hostname (config) # write memory