Configuring Cisco Secure Firewalls for SNMP using FDM

[Music] [Applause] [Music] this video is going to complement an article i wrote not so long ago about how to configure cisco's firepower or more recently renamed to cisco secure firewall snmp using firepower device manager so for those that have not seen the article i've wrote this video will complement that so this is kind of one of those videos that i did earlier um the configuration of snmp is slightly different to configuring it for ftd devices when using the fmc you have to um create flex config to do that so we'll just run through the the steps to actually get everything in place and configured so first of all what we want to do is want to go across to objects and then what we want to do is we want to go down to secret keys uh and by the way this uh demo device that i'm using here is using 6.6.3 version when on secret keys what we need to do is create a new secret key and this is going to be used for our v2 community so we just give it a name description and password and confirm the password and this is what it looks like and on the one that i've already done what we then need to do is also create an object for our snmp server horse so what we do is we go to network add and then you can add the snmp host in here so you can either do a range if you've got a range of snmp target so if you just got a single horse then you can just put the host ip address in there once the objects are done we then need to go to flex config so if we just go back to the device and down to advanced configuration which includes the flex config we just click view configuration and then what we need to do is we go to flex config objects and what we do here is we create a new object give the flex config a name and then what we're going to do is we're going to add our variables in in the into the template so if we take a look at the one that i've done earlier so what i've done is i'll give it a name so snmp community version two and then what we're doing here is um is taking the name from the value and that's the secret of the the object that we put in as a variable and then likewise it's also taking the object for the network and putting that in as the snmp server so what you do there is you just essentially give it a name so snmp say and then we would do in our case we select secret for the first one and then we select the object that we created and then likewise with the network we then select the network that we created as well and that's when you end up with these two results here so in the template and you can copy this information within our template here that's on my article i will put the link uh to the article in this video description uh below um so if you want to just copy and paste this from there then you can but essentially what we're doing is we are using the uh usual for those that are quite familiar with uh the asa or leaner side of the cord we're using this in the flex config so um what we do is we specify the config as well as the values so these values up here that we specify him and we also put in the config to negate um or remove the um the configuration and we um we do that because when the configurations pushed from the device manager what it does is it removes and reapplies a config so to avoid any issues do make sure that you put in the no statements as well to remove that and essentially that is it so what you do then is we go to flex config and then we add the object the flex config object that we just created in this step so you can see snmp community version two and then we just add this in here as you can see it's already added and if you click on it you can also get the same information up uh that we had on the object and what it'll do is it'll give you a preview here of what the config is going to look like so what it does is essentially removes the variables from the config and it gives you the output that you're going to expect to see on the device so as you can see our community is a secret so you can see that's our password there we can see that the host has been specified so that's this value here then the rest of the information is is just started apart from the the community again so once you're happy with that once you've added that uh into the group list go ahead and save that as well by the way keep saving all the steps where we create the configuration again this is covered in the article the video is just a kind of visual representation go ahead and save that and then you can go ahead and deploy the the configuration and once that's deployed you can then expect to see or you should be able to pull the ftd device [Music] [Applause] you

Channel: Network Wiizkiid

Views: 632

Keywords: Network Wizkid, Security, CCNP, CCNA, CCIE, CCIE Security, Cisco, Labs, Cisco Labs, Cisco Secure Firewall, Firepower device manager, FDM, SNMP FDM, SNMP Firepower Device Manager

Id: fUmFG9sEu8g

Length: 7min 35sec (455 seconds)

Published: Fri Apr 30 2021