---
schema_version: "1"
id: f344e61388345ea126aca082fa9de378fbb97fa28a2cbb07670281e3fcee4749
title: Prepare Network Devices for SNMP Discovery
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_discovery_prepare_snmp_targets.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_prepare_snmp_targets.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 023b7590f982d968d1144fe0d846d4298ac6ec42b65417121d32215acb8b1bd9
description: Discover switches, routers, firewalls, printers, and other network devices accurately by preparing them for Simple Network Management Protocol (SNMP) scans. Turn on a supported SNMP version, provide read-only access to the required management information, and allow connectivity from the Discovery Application host before you create the discovery target.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Prepare Network Devices for SNMP Discovery

Discover switches, routers, firewalls, printers, and other network devices accurately by preparing them for Simple Network Management Protocol (SNMP) scans. Turn on a supported SNMP version, provide read-only access to the required management information, and allow connectivity from the Discovery Application host before you create the discovery target.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service that have Discovery enabled.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d67782e74">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d67782e74 ">To manage Discovery:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d67782e74 ">IT Service Asset Discovery</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d67782e74 ">To prepare a network device:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d67782e74 ">Access to configure SNMP and network access on the target device</td>

          </tr>
        </tbody>
      </table>

Prepare the Discovery Application host before you configure target devices. For more information about Discovery Application host requirements, see [Prepare the Discovery Application Host for Agentless Scans](https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_prepare_app_host.htm&release=264.0.0&type=5 "Run reliable agentless scans and keep asset data in CMDB current by preparing a Windows host for the Discovery Application. Provide outbound access to Salesforce, protocol-specific access to target systems, and a service account with local administrator access. Verify connectivity so the application can run scan jobs and return results for processing.").

SNMP discovery requires network access from the Discovery Application host to each target device. For more information about connectivity and access requirements, see [Agentless Discovery Network, Port, and Access Requirements](https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_network_access_requirements.htm&release=264.0.0&type=5 "Improve agentless scan reliability and keep discovered asset data current. Review the connectivity and access requirements for each supported probe before you create discovery targets.").

The Discovery Application uses SNMP to collect device identity, interface, hardware, and configuration data. Configure each target device for SNMP v2c or SNMP v3 according to your organization's security policy.

During an SNMP scan, the Discovery Application first collects standard device information from the system Management Information Base (MIB) at OID `1.3.6.1.2`. The Discovery Application reads the `sysObjectID` to identify the device manufacturer and then collects supported manufacturer-specific information from the enterprise MIB at OID `1.3.6.1.4.1`. The collected information can include system details, interfaces, IP addresses, Address Resolution Protocol (ARP) data, serial number, manufacturer, firmware, high-speed interface data, and host-resource data.

1. Select SNMP v2c or SNMP v3 for each target device.
2. Turn on the selected SNMP version on each target device.
3. Create the authentication details for the selected SNMP version.
    
    - For SNMP v2c, create a community string.
    - For SNMP v3, create a username and the authentication and privacy settings required by the device.
4. Grant the SNMP identity read-only access to the full Management Information Base (MIB) tree.
    
    A view that limits access to specific MIB subtrees can produce incomplete discovery results.
5. Restrict SNMP access on the device to the Discovery Application host.
6. Allow SNMP traffic over UDP port 161 from the Discovery Application host to each target device.
7. From the Discovery Application host, use an approved SNMP walk utility to verify the credentials and read access on a representative device.
    
    Verify that the SNMP credentials provide read-only access to the system MIB at OID `1.3.6.1.2` and the manufacturer’s enterprise MIB at OID `1.3.6.1.4.1`.

The network devices are ready for the Discovery Application to authenticate and run the SNMP probe.

Create an SNMP discovery credential that uses the prepared authentication details. For more information about discovery credentials, see [Create Discovery Credentials for Secure Scanning](https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_create_cred.htm&release=264.0.0&type=5 "Use discovery credentials to securely connect to systems and collect data during agentless scans. Credentials authenticate access to devices, applications, and cloud environments without manual sign-in. Create and manage credentials for supported types such as Windows, SSH, SNMP, or AWS to ensure accurate and authorized discovery results.").

Create the discovery target and select the prepared SNMP credential. For more information about discovery targets, see [Create a Discovery Target](https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_create_target.htm&release=264.0.0&type=5 "Create a discovery target to define where and how agentless discovery scans IT environments. Targets define the systems, IP ranges, and environments included in agentless discovery. Each target also specifies probe types that determine how those systems are scanned. When a target runs, it creates a scan job that collects discovery data and updates asset information in Configuration Management Database (CMDB).").