[{"data":1,"prerenderedAt":435},["ShallowReactive",2],{"blog-snmp-discovery-tutorial":3},{"id":4,"title":5,"author":6,"body":7,"category":415,"date":416,"description":417,"extension":418,"featured":419,"image":420,"locale":420,"meta":421,"modified":420,"navigation":422,"path":423,"readingTime":424,"seo":425,"sitemap":426,"slug":420,"stem":427,"tags":428,"__hash__":434},"blog\u002Fblog\u002Fsnmp-discovery-tutorial.md","Deep Dive: SNMP Discovery in Open-AudIT","Open-AudIT Community",{"type":8,"value":9,"toc":401},"minimark",[10,14,19,22,53,56,60,63,68,75,127,139,143,150,154,161,165,168,178,181,252,256,261,316,325,328,333,343,347,350,370,381,385,394,397],[11,12,13],"p",{},"SNMP (Simple Network Management Protocol) is the backbone of network device management. Open-AudIT supports SNMP v1, v2c, and v3, allowing it to gather rich inventory data from routers, switches, printers, UPS devices, and any other SNMP-capable hardware.",[15,16,18],"h2",{"id":17},"why-snmp-matters-for-asset-inventory","Why SNMP Matters for Asset Inventory",[11,20,21],{},"Without SNMP credentials, Open-AudIT can detect that a network device exists (via ICMP\u002FTCP probing) but can't retrieve:",[23,24,25,33,38,43,48],"ul",{},[26,27,28,32],"li",{},[29,30,31],"strong",{},"Interface details",": IP addresses, VLANs, port descriptions",[26,34,35],{},[29,36,37],{},"Hardware model & serial number",[26,39,40],{},[29,41,42],{},"Firmware version",[26,44,45],{},[29,46,47],{},"Routing tables & ARP cache",[26,49,50],{},[29,51,52],{},"Uptime and performance counters",[11,54,55],{},"With SNMP configured, all of that becomes available automatically.",[15,57,59],{"id":58},"configuring-snmp-v2c-credentials","Configuring SNMP v2c Credentials",[11,61,62],{},"This is the most common configuration for internal networks.",[64,65,67],"h3",{"id":66},"step-1-add-the-credential","Step 1: Add the Credential",[11,69,70,71,74],{},"Navigate to ",[29,72,73],{},"Admin → Credentials → Create"," and fill in:",[76,77,78,91],"table",{},[79,80,81],"thead",{},[82,83,84,88],"tr",{},[85,86,87],"th",{},"Field",[85,89,90],{},"Value",[92,93,94,106,116],"tbody",{},[82,95,96,100],{},[97,98,99],"td",{},"Name",[97,101,102],{},[103,104,105],"code",{},"Office Switches v2c",[82,107,108,111],{},[97,109,110],{},"Type",[97,112,113],{},[103,114,115],{},"snmp_v2c",[82,117,118,121],{},[97,119,120],{},"Community String",[97,122,123,126],{},[103,124,125],{},"public"," (or your actual community string)",[128,129,130],"blockquote",{},[11,131,132,135,136,138],{},[29,133,134],{},"Security tip:"," Avoid using the default ",[103,137,125],{}," community string in production. Create a read-only community string dedicated to monitoring.",[64,140,142],{"id":141},"step-2-assign-to-a-discovery","Step 2: Assign to a Discovery",[11,144,145,146,149],{},"When creating or editing a Discovery, expand the ",[29,147,148],{},"Credentials"," section and select your newly created SNMP credential.",[64,151,153],{"id":152},"step-3-run-the-discovery","Step 3: Run the Discovery",[11,155,156,157,160],{},"After running, check the device record for any switch or router. You should now see a ",[29,158,159],{},"Network Interfaces"," section populated with interface data.",[15,162,164],{"id":163},"configuring-snmp-v3","Configuring SNMP v3",[11,166,167],{},"SNMP v3 adds authentication and encryption, making it suitable for secure or compliance-sensitive environments.",[169,170,175],"pre",{"className":171,"code":173,"language":174},[172],"language-text","# Example SNMPv3 user configuration on a Cisco IOS switch\nsnmp-server group READONLY v3 priv\nsnmp-server user open-audit READONLY v3 auth sha MyAuthPass priv aes 128 MyPrivPass\nsnmp-server view ISO iso included\n","text",[103,176,173],{"__ignoreMap":177},"",[11,179,180],{},"In Open-AudIT, create the credential with:",[76,182,183,191],{},[79,184,185],{},[82,186,187,189],{},[85,188,87],{},[85,190,90],{},[92,192,193,202,212,222,232,242],{},[82,194,195,197],{},[97,196,110],{},[97,198,199],{},[103,200,201],{},"snmp_v3",[82,203,204,207],{},[97,205,206],{},"Username",[97,208,209],{},[103,210,211],{},"open-audit",[82,213,214,217],{},[97,215,216],{},"Auth Protocol",[97,218,219],{},[103,220,221],{},"SHA",[82,223,224,227],{},[97,225,226],{},"Auth Password",[97,228,229],{},[103,230,231],{},"MyAuthPass",[82,233,234,237],{},[97,235,236],{},"Privacy Protocol",[97,238,239],{},[103,240,241],{},"AES-128",[82,243,244,247],{},[97,245,246],{},"Privacy Password",[97,248,249],{},[103,250,251],{},"MyPrivPass",[15,253,255],{"id":254},"troubleshooting-snmp-discovery","Troubleshooting SNMP Discovery",[11,257,258],{},[29,259,260],{},"Device shows as \"uncontactable\" for SNMP:",[262,263,264,310,313],"ol",{},[26,265,266,267],{},"Verify the device responds to SNMP from the Open-AudIT server:\n",[169,268,272],{"className":269,"code":270,"language":271,"meta":177,"style":177},"language-bash shiki shiki-themes github-dark github-dark","snmpwalk -v2c -c public \u003Cdevice-ip> sysDescr\n","bash",[103,273,274],{"__ignoreMap":177},[275,276,279,283,287,290,294,298,301,304,307],"span",{"class":277,"line":278},"line",1,[275,280,282],{"class":281},"sFR8T","snmpwalk",[275,284,286],{"class":285},"s8ozJ"," -v2c",[275,288,289],{"class":285}," -c",[275,291,293],{"class":292},"s4wv1"," public",[275,295,297],{"class":296},"sOPea"," \u003C",[275,299,300],{"class":292},"device-i",[275,302,11],{"class":303},"suv1-",[275,305,306],{"class":296},">",[275,308,309],{"class":292}," sysDescr\n",[26,311,312],{},"Check the device's ACL. It may restrict SNMP access to specific source IPs",[26,314,315],{},"Ensure UDP port 161 is open between Open-AudIT and the device",[11,317,318],{},[29,319,320,321,324],{},"Getting ",[103,322,323],{},"No Such Object"," for some OIDs:",[11,326,327],{},"This usually means the device's SNMP view doesn't include that OID tree. Check the SNMP view configuration on the device.",[11,329,330],{},[29,331,332],{},"SNMPv3 authentication failures:",[11,334,335,336,338,339,342],{},"Double-check the auth\u002Fprivacy protocol and passwords. Note that SNMPv3 is case-sensitive: ",[103,337,221],{}," and ",[103,340,341],{},"sha"," must match what the device expects.",[15,344,346],{"id":345},"working-with-snmp-data-in-open-audit","Working with SNMP Data in Open-AudIT",[11,348,349],{},"Once SNMP discovery is working, you can leverage the data in several ways:",[23,351,352,358,364],{},[26,353,354,357],{},[29,355,356],{},"Network topology maps",": Open-AudIT can infer Layer 2 topology from switch MAC tables",[26,359,360,363],{},[29,361,362],{},"VLAN inventory",": see which VLANs exist and which ports belong to them",[26,365,366,369],{},[29,367,368],{},"Firmware compliance reports",": report on devices running outdated firmware versions",[11,371,372,373,380],{},"Check out the ",[374,375,379],"a",{"href":376,"rel":377},"https:\u002F\u002Fdocs.community.firstwave.com\u002Fwiki\u002Fspaces\u002FOA\u002Foverview",[378],"nofollow","reporting documentation"," for examples of SNMP-powered reports.",[15,382,384],{"id":383},"community-mibs","Community MIBs",[11,386,387,388,393],{},"Open-AudIT ships with a broad set of vendor MIBs pre-loaded. If you have devices that aren't returning the expected data, check whether a community-contributed MIB is available on our ",[374,389,392],{"href":390,"rel":391},"https:\u002F\u002Fgithub.com\u002FOpmantek\u002Fopen-audit",[378],"GitHub repo",".",[11,395,396],{},"Feel free to submit additional MIBs via pull request!",[398,399,400],"style",{},"html pre.shiki code .sFR8T, html code.shiki .sFR8T{--shiki-default:#B392F0;--shiki-dark:#B392F0}html pre.shiki code .s8ozJ, html code.shiki .s8ozJ{--shiki-default:#79B8FF;--shiki-dark:#79B8FF}html pre.shiki code .s4wv1, html code.shiki .s4wv1{--shiki-default:#9ECBFF;--shiki-dark:#9ECBFF}html pre.shiki code .sOPea, html code.shiki .sOPea{--shiki-default:#F97583;--shiki-dark:#F97583}html pre.shiki code .suv1-, html code.shiki .suv1-{--shiki-default:#E1E4E8;--shiki-dark:#E1E4E8}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":177,"searchDepth":402,"depth":402,"links":403},2,[404,405,411,412,413,414],{"id":17,"depth":402,"text":18},{"id":58,"depth":402,"text":59,"children":406},[407,409,410],{"id":66,"depth":408,"text":67},3,{"id":141,"depth":408,"text":142},{"id":152,"depth":408,"text":153},{"id":163,"depth":402,"text":164},{"id":254,"depth":402,"text":255},{"id":345,"depth":402,"text":346},{"id":383,"depth":402,"text":384},"Tutorials","2025-12-10","Learn how to configure SNMP v1, v2c and v3 credentials in Open-AudIT to get detailed inventory data from routers, switches, printers and more.","md",false,null,{},true,"\u002Fblog\u002Fsnmp-discovery-tutorial",10,{"title":5,"description":417},{"loc":423},"blog\u002Fsnmp-discovery-tutorial",[429,430,431,432,433],"SNMP","network-discovery","routers","switches","credentials","ItMB9XKmQ3CdkggweXNgcDkCdvhcUuSNzmXYVRfUWHs",1792632800232]