1.5.8 Set 'snmp-server enable traps snmp'

Information

SNMP notifications can be sent as traps to authorized management systems.

SNMP has the ability to submit traps .

Solution

Enable SNMP traps.

hostname(config)#snmp-server enable traps snmp authentication linkup linkdown coldstart

Impact:

Organizations using SNMP should restrict trap types only to explicitly named traps to reduce unintended traffic. Enabling SNMP traps without specifying trap type will enable all SNMP trap types.

See Also

https://workbench.cisecurity.org/benchmarks/12917

Item Details

Category: ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-17(3), 800-53|SI-7, CSCv7|11.7

Plugin: Cisco

Control ID: f0a646b4cfc3404bb59f4b2abed02c44aae490c2fa5ec8175330f4df9b1b4eda