Purpose	Use the show snmp-server command to see all SNMP-configuration settings.
Mode	(any)
Security Role(s)	crypto-officer, storage-engineer, network-engineer, network-technician, or operator
Syntax	show snmp-server
Guidelines	System Information contains configuration information: Name can be reset with the snmp-server name command. Contact can be set with snmp-server contact. Location can be changed with snmp-server location. Name, Contact, and Location are the configurable parts of the MIB-2 system table. Interface is the interface used for SNMP communication: this is either Management, VLAN, or None, as set by the cfg-mgmt-access permit command. Traps shows the scope of SNMP traps that the ARX can send. The options are Private Traps enabled (the traps that are unique to the ARX, cataloged in the ARX SNMP Reference), All Traps enabled (ARX-only traps together with generic SNMP traps), or Disabled. You can set this with the snmp-server traps command. Access Mode/Communities is a table of access permissions (read-only, or read-write) and the community string associated with each. The community string is encrypted. You can use snmp-server community to set it. Trap Targets shows all of the SNMP hosts configured to receive traps. Use snmp-server host to change this list. Trusted Hosts are allowed to perform gets and/or sets. The snmp-server trusthost command controls this setting.
Sample	bstnA> show snmp-server   shows the SNMP configuration for the bstnA switch. See Figure 12.1 for sample output.
Related Commands	snmp-server contact snmp-server name snmp-server location snmp-server community snmp-server trusthost snmp-server traps snmp-server host

Purpose	External SNMP agents use a community string to access the local SNMP agent. Use the snmp-server community command to enter a valid community string for SNMP access. Use the no form of snmp-server community to remove a community string from the list.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	snmp-server community community-string {read-only | read-write} no snmp-server community community-string {read-only | read-write}   community-string is up to 16 characters. read-only | read-write is a required choice. This sets the permissions for agents that access the local SNMP agent.
Default(s)	None
Guidelines	You can use this command multiple times, once for each supported community string. The no form removes one of the strings from the list. After you have configured a community string with this command, you can use the snmp-server trusthost command for each trusted SNMP host.
Samples	bstnA(cfg)# snmp-server community public read-only establishes read-only access for trusted hosts that use the public community string in their SNMP queries.   bstnA(cfg)# no snmp-server community experimental read-write removes a community string, experimental, from the list of valid strings.
Related Commands	snmp-server trusthost

Purpose	Use the snmp-server contact command to enter contact information (sysContact, MIB-2.1.1.4) for the ARX. Use no snmp-server contact to clear the contact information.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	snmp-server contact contact-info no snmp-server contact   contact-info (1-255 characters) is the SNMP contact information. Use quotation marks around the string if it contains any spaces.
Default(s)	No contact information is set.
Guidelines	The sysContact MIB object is part of the MIB-2.system tree, MIB-2.1.1.4. Use the hostname command to set the sysName object, and use the snmp-server location command to set the sysLocation.
Samples	bstnA(cfg)# snmp-server contact jpublic, jpublic@mycompany.com sets the sysContact MIB object for the ARX.   bstnA(cfg)# no snmp-server contact erases the setting for the sysContact MIB object.
Related Commands	hostname snmp-server location

Purpose	Use the snmp-server host command to configure a target for SNMP notifications (such as SNMP traps). Use the no form of the command to remove an SNMP server from the list.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	snmp-server host host-ip community-string [udp-port] no snmp-server host host-ip   host-ip is the IP address of the SNMP host (for example, 192.168.70.65). community-string (up to 16 characters) is sent in each SNMP packet. udp-port (optional; 1-65535) is the UDP port where the remote host is listening for SNMP notifications. For most SNMP hosts, the default (162) is sufficient.
Default(s)	162, the well-known port for SNMP notifications, is the default udp-port.
Guidelines	You can use this command multiple times to define up to 6 trap destinations. Use the snmp-server traps command to enable SNMP traps. For communication with an SNMP server (host access or trap transmission), you must also permit access to the SNMP agent through the internal firewall. Use the management access snmp command to edit the rules for SNMP, then use the permit command to permit server access through the out-of-band management interface (labeled MGMT on the front panel), the in-band (VLAN) management interface(s), or both.
Samples	bstnA(cfg)# snmp-server host 10.1.1.68 public bstnA(cfg)# snmp-server host 172.16.100.101 public sets two destinations for SNMP notifications.   bstnA(cfg)# no snmp-server host 192.168.25.215 removes the SNMP host at 192.168.25.215 from the list of trap destinations.
Related Commands	snmp-server traps management access -> permit

Purpose	Use the snmp-server location command to enter location information (sysLocation, MIB-2.1.1.6) for the ARX. Use the no form of the command to clear the sysLocation setting.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	snmp-server location location-info no snmp-server location   location-info (1-255 characters) is the SNMP-server location information. Use quotation marks around the string if it contains any spaces.
Default(s)	No location information is set.
Guidelines	The sysLocation MIB object is part of the MIB-2.system tree, MIB-2.1.1.6. Use the hostname command to set the sysName object, and use the snmp-server contact command to set the sysContact.
Samples	bstnA(cfg)# snmp-server location 2nd floor lab, row 3, bay 4, shelf 5 sets the sysLocation MIB object for the ARX.   bstnA(cfg)# no snmp-server location clears the sysLocation object for the ARX.
Related Commands	hostname snmp-server contact

Purpose	Use the snmp-server name command to enter a new SNMP-advertised name for the ARX (sysName, MIB-2.1.1.5). Use the no form of the command to erase the name.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	snmp-server name machine-name no snmp-server name [machine-name]   machine-name (1 to 255 characters) is the administrative name of the server.
Default(s)	None
Guidelines	The sysName MIB object is part of the MIB-2.system tree, MIB-2.1.1.5. Use the snmp-server location command to set the sysLocation object, and use the snmp-server contact command to set the sysContact.
Sample	bstnA(cfg)# snmp-server name acopia1 sets the sysName MIB object for the bstnA ARX.
Related Commands	snmp-server location snmp-server contact

Purpose	Use the snmp-server traps command to enable SNMP traps from the ARX. Use the no snmp-server traps command to disable SNMP traps.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	snmp-server traps [private] no snmp-server traps   private (optional) enables only private traps, and disables the standard generic traps defined in RFC 1157. If you omit this option, the command enables all traps. Private traps are the enterprise traps defined specifically for the ARX. For a full list of F5s ARX-enterprise (private) traps, see the ARX SNMP Reference.
Default(s)	all traps enabled
Guidelines	This command enables all SNMP traps, with an option to omit the generic traps and only use private (ARX) traps. The generic traps are defined in RFC 1157, the specification for SNMP, as one of the following: coldStart warmStart linkDown linkUp authenticationFailure entityConfigChange (defined in the RFC as an enterpriseSpecific trap) Use the snmp-server host command to provide a destination for SNMP traps. For communication with an SNMP server (host access or trap transmission), you must also permit access to the SNMP agent through the internal firewall. Use the management access snmp command to edit the rules for SNMP, then use the permit command to permit server access through the out-of-band management interface (labeled MGMT on the front panel), the in-band (VLAN) management interface(s), or both. If you are sending traps out through a channel on the client/server VLANs, use no trap shutdown to enable SNMP traps on the channel.
Samples	bstnA(cfg)# snmp-server traps enables all trap types.   bstnA(cfg)# no snmp-server traps disables all traps.
Related Commands	snmp-server host management access -> permit no trap shutdown

Purpose	Use the snmp-server trusthost command to permit SNMP gets and sets from a remote host. Use the no form of the command to remove an SNMP host from the list of trusted hosts.
Mode	cfg
Security Role(s)	network-engineer or crypto-officer
Syntax	snmp-server trusthost host-ip no snmp-server trusthost host-ip   host-ip is the IP address of the SNMP host (for example, 192.168.70.65).
Default(s)	All hosts are trusted (if they use the string(s) specified through snmp-server community) until you limit the number of trusted hosts with this command.
Guidelines	You can use this command multiple times to configure up to 8 trusted hosts. Before you use this command, all hosts are trusted (though they are denied access through the firewall; see below). For communication with an SNMP server (host access or trap transmission), you must also permit access to the SNMP agent through the internal firewall. Use the management access snmp command to edit the rules for SNMP, then use the permit command to permit server access through the out-of-band management interface (labeled MGMT on the front panel), the in-band (VLAN) management interface(s), or both.
Samples	bstnA(cfg)# snmp-server trusthost 10.1.1.68 allows the SNMP host at 10.1.1.68 to access the local SNMP agent.   bstnA(cfg)# no snmp-server trusthost 172.16.100.101 removes the SNMP host at 172.16.100.101. The local SNMP agent will no longer accept SNMP gets or sets from that IP address.
Related Commands	snmp-server community management access -> permit