Cray System Management Documentation > Cray System Management (CSM) Administration Guide > network > Management Network User Guide > Configuring SNMP in CSM

Configuring SNMP in CSM

This page describes how SNMP is used with CSM and provides some examples of working with SNMP on the management switches.

How SNMP is used in CSM

The Prometheus SNMP Exporter, River Endpoint Discovery Service (REDS) hardware discovery, and Power Control Service (PCS)/Redfish Translation Service (RTS) management switch availability monitoring rely on SNMP credentials stored in Vault. These credentials are read from Vault and pushed into customizations.yaml as a sealed secret. For the SNMP Exporter, REDS hardware discovery, and PCS/RTS management switch availability monitoring to work, three things need to have been done by an administrator:

The SNMP credentials need to have been pushed into the correct path in Vault.
- Updating the SNMP credentials for existing switches
- Updating the SNMP credentials for switches added in the future
The SNMP credentials need to have been encrypted as sealed secrets and written to customizations.yaml (this is covered in the documentation linked in the previous bullet).
The SNMP credentials need to be added to the running configuration on every management network switch.
- Information about managing Dell switches including SNMPv2 community and SNMPv3 user settings
- Information about managing Mellanox switches including SNMPv2 community and SNMPv3 settings
- Information about managing Aruba switches including SNMPv2 community and SNMPv3 settings

Note: While the CSM Automatic Network Utility (CANU) will typically not overwrite SNMP settings that are manually applied to the management switches, there are certain cases where SNMP configuration can be over-written or lost (such as when resetting and reconfiguring a switch from factory defaults). To persist the SNMP settings, see CANU Custom Configuration. CANU custom configuration files are used to persist site management network configurations that are intended to take precedence over configurations generated by CANU.

If the Prometheus SNMP Exporter, REDS hardware discovery, or RTS emit errors related to SNMP authentication, then an administrator should:

Validate that the correct SNMP credential key/value pairs exist in Vault (see information above).
Validate that the SNMP credential sealed secrets in customizations.yaml match Vault and the credentials stored on the management switches.
Validate that the SNMP credentials configured on the management switches match the credentials stored in Vault (see information above).

Examples of configuring SNMP on management switches

(sw#) The following are examples only; verify SNMP credentials before applying this configuration.

Dell SNMP

Find Dell-specific documentation in the Dell Management Docs

conf t
   snmp-server group cray-reds-group 3 noauth read cray-reds-view
   snmp-server user testuser cray-reds-group 3 auth md5 xxxxxxxx priv des xxxxxxx
   snmp-server view cray-reds-view 1.3.6.1.2 included

Aruba SNMP

Find Aruba-specific documentation in the Aruba Management Docs.

conf t
   snmp-server vrf default
   snmpv3 user testuser auth md5 auth-pass plaintext xxxxxx priv des priv-pass plaintext xxxxx

Mellanox SNMP

Find Mellanox-specific documentation in the Mellanox Management Docs.

    snmp-server user testuser v3 capability admin
    snmp-server user testuser v3 enable
    snmp-server user testuser v3 enable sets
    snmp-server user testuser v3 encrypted auth md5 xxxxxxx priv des xxxxxxx
    snmp-server user testuser v3 require-privacy