Switches, firewalls, UPS units, servers and NAS boxes with no vendor API still answer SNMP. SmartTile polls them read-only over v2c or v3 — reachability, interface traffic and errors, identity, health sensors — and turns a silent agent into a DOWN with a ticket in the IT Service Management (ITSM) system your team already uses.
A device you can only reach by SNMP is usually watched by ping alone — up or down, nothing else. With the community string or v3 user saved on the device, SmartTile asks the agent the questions a NOC asks: is it answering, what is it, how busy are its links, is it healthy? Every request is a read (GET / GETBULK / walk). SmartTile never issues an SNMP SET.
An SNMP_Availability check (sysUpTime) on every SNMP device. For a device with ping turned off, that SNMP GET is the host check — three failed polls and it is DOWN.
Discover Interfaces walks the ifTable once; each port then gets oper-status, ifHCIn/OutOctets + ifSpeed, and in/out errors and discards. The Bandwidth button graphs per-interface Mbps from 24 h to 1 year.
Every 6 h: sysDescr, sysObjectID, sysName, uptime, and ENTITY-MIB chassis rows — vendor, model, serial and firmware for every stack member. Shown in Edit Device as “Detected via SNMP · 2 h ago”; a value typed by a person is never overwritten.
The Device Health panel reads HOST-RESOURCES (CPU, memory, disk), ENTITY-SENSOR (temperature, fans, PSUs) and UPS-MIB (charge, runtime, load, self-test), plus vendor OIDs chosen from the Device Catalog.
FortiGate, Cisco IOS / ASA, Palo Alto, SonicWall, Juniper, MikroTik, APC, Synology, Aruba, Dell and more — every vendor OID carries a published-MIB citation. A vendor we could not verify gets standard MIBs only, and says so.
Opt a circuit in with the Bandwidth Trigger: its interface counters are read over SNMP every 60 s and a sustained breach (“over X Mbps for N minutes”) opens a ticket; the first clean sample closes it.
The Devices-page SNMP badge is lifted from the engine's real SNMP_Availability result every sync — not from whether someone opened a modal or which plan the company is on.
Private targets are polled from the server's site-tunnel address, or through the device's SSH jump host when its Monitoring Route names one — the same route its ping takes. Test SNMP and discovery follow it too.
| What you give | What works |
|---|---|
| v2c read-only community | Everything on this page. |
| SNMPv3 user (authPriv recommended) | The same, authenticated and encrypted on the wire. Levels noAuthNoPriv, authNoPriv, authPriv. |
| Device Health on the plan | Health sensors and vendor OIDs in the Device Health panel; scheduled health tickets are a separate switch, off by default. |
| Bandwidth Trigger on the device | 60-second SNMP sampling and threshold tickets for that circuit. |
| The moment | SNMP alone | With SmartTile |
|---|---|---|
| An SNMP-only switch dies | A trap you may never receive; a graph that just stops. | sysUpTime fails three polls → DOWN, written to state history; after the ticket gate one ticket opens for the location in Rev.io and the company's connected ITSM system. |
| A circuit runs hot | Someone notices the graph later. | Over the Bandwidth Trigger for the sustain time → a threshold ticket; recovery closes it. |
| A stack member is swapped | Spreadsheet out of date. | The next 6-hourly read records the new serial; a manual value is kept and the disagreement is shown. |
| The credential is wrong | Silent gaps. | The badge reads “no reply” from the real poll, and Test SNMP says what failed. |
GET 1.3.6.1.2.1.1.3.0sysUpTime — availability / host checkGET 1.3.6.1.2.1.2.2.1.8.<if>ifOperStatus per interfaceGET 1.3.6.1.2.1.31.1.1.1.6 / .10ifHCIn / OutOctets → MbpsGET 1.3.6.1.2.1.2.2.1.5ifSpeed → utilisationGET 1.3.6.1.2.1.2.2.1.13/14/19/20discards and errors, in / outGET 1.3.6.1.2.1.1.1 / .2 / .5sysDescr, sysObjectID, sysNameWALK 1.3.6.1.2.1.47.1.1.1.1ENTITY-MIB: model, serial, firmwareWALK 1.3.6.1.2.1.25.2 / 25.3HOST-RESOURCES: CPU, memory, diskWALK 1.3.6.1.2.1.99.1.1.1ENTITY-SENSOR: temperature, fan, PSUGET 1.3.6.1.2.1.33.1.*UPS-MIB: battery, runtime, loadGET, GETBULK and walk only. No SET is implemented anywhere in the SNMP path.
Community strings and v3 auth / privacy keys are encrypted at rest; the form shows “Saved — type to replace”, never the value, and they are masked in the audit log by field-name pattern.
Test, discovery and graphs check the device belongs to the signed-in user's locations. Each company's credentials stay on its own devices.
SNMP identity, the setup guide, the SNMP host check, jump-host SNMP and the Nagios-driven badge each have their own switch — instant rollback, no redeploy.
| Objection | Answer |
|---|---|
| “SNMP v2c is clear-text.” | Use SNMPv3 authPriv — SHA-256 and AES-256 are offered and recommended in the form. |
| “Our ACLs only allow one address.” | The setup guide prints the exact source address for that device's route; private sites can be polled through a jump host already in your ACL. |
| “We already graph interfaces elsewhere.” | SmartTile puts the same counters next to the circuit, the ticket and the uptime report — and opens the ticket when the agent goes silent. |