Configure SNMP for Access Points

Applies To: WatchGuard Cloud-managed Access Points (AP130, AP230W, AP330, AP332CR, AP430CR, AP432)

SNMP (Simple Network Management Protocol) is used to monitor devices on your network.

You can configure your access point to accept SNMP polls from an SNMP management system.

You can also send SNMP trap messages for access point events to an SNMP trap destination server. The trap identifies when a specific condition occurs, such as a value that is more than its predefined threshold. A trap is sent only once, and the trap destination does not send any acknowledgment when it receives the trap.

SNMP access point monitoring requires a WatchGuard USP Wi-Fi Management license.

SNMP MIB File for Access Points

SNMP uses management information bases (MIBs) to define what information and events to monitor. You can download and import the SNMP MIB file for the WatchGuard access point to your SNMP management system.

The access point MIB file often changes during new device firmware releases. Make sure to download the latest MIB file.

SNMP Integration with RMM Tools

When you have configured SNMP on your access points, you will be able to integrate with remote management and monitoring (RMM) solutions to monitor your devices.

For detailed information on how to integrate WatchGuard access points with popular RMM solutions, go to Wi-FI Integration Guides.

Configure SNMP for Access Points in WatchGuard Cloud

To configure SNMP for an access point, from WatchGuard Cloud:

  1. Select Configure > Devices.
  2. Select a cloud-managed access point.
  3. Select Device Configuration.
  4. In the Settings tile, select Advanced Settings.

You can also configure advanced device settings such as SNMP in an Access Point Site and apply the configuration to multiple access points. For more information, go to About Access Point Sites.

  1. Enable SNMP.

Screen shot of the SNMP configuration for access points managed by WatchGuard Cloud

  1. From the Version drop-down list, select the SNMP version number.
  2. v1/v2c — SNMP v1 is the original version that provides low security because the community strings are communicated in plain text. SNMP v2c is similar to v1 with improvements to device management and network interface polling.
  3. v3 — SNMP v3 is the latest and most secure SNMP protocol version that enables you to use authentication and encryption to protect SNMP data.

Make sure your access point configuration matches the configuration on your SNMP management system.

  1. If you select SNMP v1/v2c, type the Read-Only Community String your device uses when it connects to the SNMP management system. This community string is transmitted in plain text and is not encrypted.
  2. If you select SNMP v3, configure these settings:
  3. User Name — Type a user name to authenticate with the SNMP management system.
  4. Authentication Protocol — Select the authentication protocol for communication to the SNMP management system (SHA1, MD5, or None). The default is SHA1.
  5. Authentication Password — If you enable the SHA1 or MD5 authentication protocol, type an authentication password. The password must be 8 to 32 characters in length.
  6. Privacy Protocol — SNMP v3 enables you to optionally encrypt messages for privacy. Select DES (Data Encryption Standard) to encrypt traffic or None to not encrypt SNMP traffic.
  7. Privacy Password — Type a password to encrypt outgoing messages and decrypt incoming messages. The password must be 8 to 32 characters in length.
  1. To send trap messages for access point events to an SNMP trap destination server, enable SNMP Traps.

Screen shot of the SNMP Traps configuration for access points managed by WatchGuard Cloud

  1. Type the IP Address and Port number for the SNMP trap destination server. The default port is UDP 162.
  2. Type the Community String your device uses when it connects to the SNMP trap destination server.
  3. Click Save.

Access Point MIB File Summary

To get the latest MIB file, go to SNMP MIB file for Wi-Fi in WatchGuard Cloud Access Points in the WatchGuard Knowledge Base.

There are two versions of the SNMP MIB files depending on the firmware version installed on your access points:

  • WATCHGUARD-PRIVATE-MIB-AP.mib — For access points with firmware v3.1 and higher.
  • WatchGuard_Private_SNMP_Trap_v1.2 — For access points with firmware v2.7 and lower only.

The following sections describe the contents of each MIB file.