We have an application that sends SNMP V2 traps to the SpectroSERVER system on behalf of other devices on the network. The source ip address is the ip address of the system where this application is installed. The destination ip address is the ip address of the SpectroSERVER system. The traps are being processed as on VNM model and not being processed on the device model as expected.
Release : Any
Component : Spectrum Core / SpectroSERVER
A check of the raw trap data in Wireshark showed the application is populating the snmpTrapAddress attribute varbind in the trap with the ip address of the SpectroSERVER system.
This is the ip address Spectrum uses SNMP V2 traps.
The following is the mib description for the snmpTrapAddress attribute:
DESCRIPTION
"The value of the agent-addr field of a Trap PDU which is forwarded by a proxy forwarder application using an SNMP version other than SNMPv1. The value of this object SHOULD contain the value of the agent-addr field from the original Trap PDU as generated by an SNMPv1 agent."
The application needs to populate the snmpTrapAddress attribute varbind in the trap with the ip address of the network device not the ip address of the SpectroSERVER system.