300-620 · Question #297
An engineer must configure SNMP inside a Cisco ACI fabric. The engineer has created an SNMP Policy, called SNMP-policy and an SNMP Monitoring Group called SNMP-group1 that contains five trap…
The correct answer is A. Permit OOB management traffic using UDP port 161. To complete SNMP configuration in Cisco ACI, you must permit out-of-band management traffic for SNMP on UDP port 161.
Question
An engineer must configure SNMP inside a Cisco ACI fabric. The engineer has created an SNMP Policy, called SNMP-policy and an SNMP Monitoring Group called SNMP-group1 that contains five trap receivers. Which configuration set completes the configuration?
Options
- APermit OOB management traffic using UDP port 161.
- BEdit oobbrc to permit traffic using UDP port 16.
- CCreate an OOB management contract.
- DAllow all OOB management traffic.
How the community answered
(37 responses)- A73% (27)
- B5% (2)
- C14% (5)
- D8% (3)
Why each option
To complete SNMP configuration in Cisco ACI, you must permit out-of-band management traffic for SNMP on UDP port 161.
SNMP communication, including queries and traps, utilizes specific UDP ports, with UDP port 161 being standard for SNMP queries. To allow the ACI fabric to send or receive SNMP messages, the out-of-band (OOB) management network must have a rule permitting traffic on this port.
UDP port 16 is incorrect for SNMP; SNMP typically uses UDP port 161 for queries and 162 for traps.
While contracts are used for in-band management, OOB management for fabric services like SNMP typically uses specific OOB management policies or filters to permit traffic, not standard EPG contracts.
Allowing all OOB management traffic is a less secure approach than permitting only the necessary SNMP port and does not represent the precise action needed to complete SNMP configuration.
Concept tested: Cisco ACI SNMP and OOB management access
Source: https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/l3-configuration/cisco-aci-layer3-configuration-guide-601/m_l3-config_OOB_management.html
Topics
Community Discussion
No community discussion yet for this question.