To manage and view the relevant information (such as the interface status, interface traffic, and route) of Sangfor devices in SNMP mode with other network management devices or software. It helps users easily manage, maintain, and monitor the network. The interface is shown below.

If you select Enable SNMP, other devices and management software can read the device information through SNMP.

Download MIB: This allows you to download MIB databases supported by the NSF device. You can import the SNMP client for use.

SNMPv1/2 allows other devices to connect the device through the SNMP v1/v2 protocol and defines connection parameters. Click Add and configure the parameters in the Add SNMPv1/2 dialog box.

Name: Specify the name of the management host.

Type: Specify the type of the management host. You can select IP address or Subnet from the drop-down list. If you select IP, the SNMP management host is set as an IP. If you select Subnet, the SNMP management host is set as a subnet. All hosts in the subnet can manage the device through SNMP.

IP Address: Specify the IP address or address range of the SNMP management host. If you select IP for the Type parameter, this parameter specifies the IP address of the SNMP management host. If you select Subnet for the Type parameter, this parameter specifies the subnet address and its mask of the SNMP management subnet. An IPv6 address is supported.

Community: Specify the community name for the SNMP management host that accesses the device.

Click OK. Then, the configuration is saved.

SNMPv3 allows you to configure some advanced expansion options necessary for communication in SNMPv3.

Context: Specify the name of the user.

Authentication Password: Specify the password used for authenticating SNMPv3 users. The authentication password contains more than 8 characters and cannot contain spaces. It is encrypted with the MD5 algorithm.

Encryption Password: Specify the password for message encryption. The encryption password contains more than 8 characters and cannot contain spaces. It is encrypted with the DES algorithm.

Security Level: Specify whether to encrypt SNMP authentication and management information. You can select Encrypted or Not Encrypted from the drop-down list. If you select Encrypted, the system applies the encryption and authentication simultaneously by first encrypting the data and then conducting the message digest calculation with the authentication technology. If you select Not Encrypted, only the authentication technology is applied.

Click OK. Then, the configuration is saved.

SNMP Trap: Actively send an SNMP message to the administrator to monitor the status of Athena NGFW in real time.

Click Add and configure the parameters in the Add SNMP Trap dialog box.

Trap Type: Specify the type of messages actively sent by Athena NGFW, including Temperature Alert, CPU Alert, Link Failure Alert, Warm Start Alert, etc. The OID corresponding to each message type can be viewed by clicking SNMP OID.

Dst IP: Specify the destination host IP address for sending SNMP Trap messages, namely the IP address of the SNMP client. Both IPv4 and IPv6 addresses are supported.

Port: Specify the port number used by the target host for listening.

Version: You can select SNMPv1, SNMPv2, or SNMPv3 from the drop-down list.

Community: Specify the name of the community sending SNMP Trap messages.

If you select SNMPv3 for the Version parameter, the Community parameter is unavailable. You must set the following parameters:

Engine ID: Specify the Engine ID of the target host (snmpEngineID), in hexadecimal string form, excluding prefix 0x.

Username: Specify the name of the SNMPv3 user existing on the SNMP client.

Authentication Method: Specify the authentication method of the SNMPv3 user. You can select MD5 or SHA from the drop-down list. By default, SHA is selected.

Authentication Password: Specify the authentication password of the SNMPv3 user.

Security Level: Specify the security level of SNMPv3 Trap messages. You can select Encrypted or Not Encrypted from the drop-down list. If you select Encrypted, specify the Encryption and Encryption Password parameters.

Encryption: Specify the encryption method of the SNMPv3 Trap message. You can select DES and AES from the drop-down list. By default, AES is selected.

Encryption Password: Specify the encryption password of SNMPv3 Trap messages.