Windows 10: SNMP Configuration

Hello guys,

I am going to configurate SNMP on some servers and clients with following considerations:


1. Servers must be monitored using our Monitoring system

2. Servers and some clients are supposed to send Traps to SIEM


For completing Task1, we installed SNMP option feature and configured SNMP server Security tab > community string and Accept packet from specific server. Now, monitoring server is able to poll information and make graphs.


But, for completing Task2, we have to change Destination Trap port. Because SIEM is listening on a port different than the default.


* It is important to keep listening on default port Because Monitoring server is POLLING information from that, and send trap to another portBecause SIEM is LISTENING to a customized port.


Could please help with this scenario and also a scenario in which both listening and sending ports would change.

:)

 

SNMP help

The issue with polling from WAN is that the router will not know what to do with the incoming connection requesting the SNMP traps. Sure you could port forward the SNMP port from WAN to LAN but the network monitoring is probably IP based and on a private subnet (IS 192.168.1.x/24) and still at the point the router would not know what to send it too once it has entered. You could do a rule to port forward each IP individually with a virtual WAN port that translates to an IP and SNMP port on the LAN side but would take time if you have MANY devices. I would just suggest doing a IPSEC vpn tunnel between the off site router to the router on site.

 

Is the "SNMP Service" unavailable in Windows 10?

If you don't see SNMP Service in the list of available services, but only SNMP Trap, then you need to add the service, which you can do by the following steps:

1. Right-click on the Windows Start button and choose Control Panel.
   
2. Select Programs from within the Control Panel, then, under
   Programs and Features, select Turn Windows features on or off.
   
3. Find Simple Network Management Protocol (SNMP) in the list of
   features and check the check box next to it then click on OK.

Once you've installed support for the service, the process for configuring the service is the same process as for configuring SNMP on Windows 7 systems.

 

SNMP help

I had tried previously to run the monitor internally on a server and just poll the devices directly over VPN which worked but the polling internval or traffic from the devices must have been too high because its caused outages network and site wide. Maybe I will look into it again and see if I misconfigured something previously.

Thanks.