Configuring SNMP sub-agent¶

The SNMP license agent provides information about license state through the SNMP protocol.

Its configuration is under the system license context:

vsr running config# system license snmp true

Here is an snmpwalk output example:

$ snmpwalk -v 2c -c public 10.0.0.1:161 license
SW-6WIND-LICENSE-MIB::computerID.0 = STRING: Z/EmBDEmfkaaFhAj3J9N
SW-6WIND-LICENSE-MIB::serial.0 = STRING: 6WIND-license-01
SW-6WIND-LICENSE-MIB::status.0 = STRING: Concurrent License Activated
SW-6WIND-LICENSE-MIB::connected.0 = INTEGER: true(1)
SW-6WIND-LICENSE-MIB::type.0 = INTEGER: perpetual(1)
SW-6WIND-LICENSE-MIB::online.0 = INTEGER: true(1)
SW-6WIND-LICENSE-MIB::currentActivation.0 = Gauge32: 20
SW-6WIND-LICENSE-MIB::allowedActivations.0 = Gauge32: 200
SW-6WIND-LICENSE-MIB::lastServerConnection.0 = STRING: 2022-3-8,10:19:44.0,.0:0
SW-6WIND-LICENSE-MIB::leaseEndDate.0 = STRING: 2022-3-29,5:19:40.0,.0:0
SW-6WIND-LICENSE-MIB::supportEndDate.0 = STRING: 2024-6-3,5:0:0.0,.0:0
SW-6WIND-LICENSE-MIB::throughputMax.0 = Gauge32: 100000
SW-6WIND-LICENSE-MIB::throughputAvg.0 = Gauge32: 0
SW-6WIND-LICENSE-MIB::maxObjects.ipsecTunnels = Gauge32: 100000
SW-6WIND-LICENSE-MIB::maxObjects.cgnatConntracks = Gauge32: 30000000
SW-6WIND-LICENSE-MIB::nbObjects.ipsecTunnels = Gauge32: 0
SW-6WIND-LICENSE-MIB::nbObjects.cgnatConntracks = Gauge32: 0

The agent also implements traps to notify the supervisor if something happens:

the connection with the server is lost. Checked every hour.
the support end date is close or over. Checked every day, a trap is sent if the end date is in 10, 5, 2 days and every day if the end date is over.
the license state is invalid. Checked every hour.
the throughput is over 90% of the maximum defined in the license. Checked every hour.
the IPsec tunnel number is over 90% of the maximum. Checked every hour.
the CG-NAT conntrack number is over 90% of the maximum. Checked every hour.

Note

The SNMP license agent is executed in main VRF. If the management network is in another one, the SNMP master must monitor the main VRF to relay requests and traps to/from the license agent.