FAQ: SNMPv1 Deprecation

Overview

Cisco is enhancing default settings on our products to provide greater protection, introducing advanced security features, and retiring outdated functionalities that no longer meet today’s standards. In our effort to drive resilient infrastructure, we encourage our users to adopt these modern capabilities and align with current best practices. To learn more about Resilient Infrastructure, please visit www.cisco.com/go/ri. 

As part of this effort, SNMPv1 will be deprecated. SNMPv2c will remain available, but SNMPv3 is the recommended version of SNMP because of its enhanced security features. 

 

Frequently Asked Questions

1. What is happening? 

Cisco Meraki is officially deprecating the use of SNMPv1. While SNMPv2c will remain available for backward compatibility support, we strongly encourage all customers to transition to SNMPv3. 

 

2. Why is this change happening? 

SNMPv1 is a legacy protocol that lacks the robust authentication and encryption mechanisms required to secure modern networks. Deprecating SNMPv1 is a proactive step to reduce the attack surface of your infrastructure and align with our Resilient Infrastructure standards. 

 

3. When is this change happening? 

The deprecation of SNMPv1 will take effect starting with the following firmware releases. Please note that these dates are subject to change: 

Product Line	Firmware Release
MR	34.1
MX	27.2
MS	27.2

Please check your specific product release notes for exact timelines regarding firmware or software updates that reflect this change. 

 

4. What is the impact? 

Once SNMPv1 is deprecated, devices or management systems relying exclusively on SNMPv1 will no longer be supported. Cisco Meraki devices running supported firmware already support SNMPv2c and SNMPv3. The Meraki dashboard allows both SNMPv1 and SNMPv2c wherever SNMP v1/v2c is configured, so there is no immediate need to modify the configuration in the Meraki dashboard. However, if your environment and SNMP Manager currently exclusively use SNMPv1, you must migrate to a supported version to ensure continued monitoring and management capabilities. 

 

5. What action do I need to take? 

1. Audit devices and tools: Identify all devices and monitoring tools in your network currently configured to use SNMPv1. 

2. Develop a migration plan: Outline how to transition these configurations to SNMPv3, which provides message integrity, authentication, and encryption. 

3. Transition to SNMPv3: If SNMPv3 is not immediately feasible for your specific legacy environment, you may transition to SNMPv2c as an interim measure; however, SNMPv3 remains the industry-recommended standard for secure management. 

4. Maintain current firmware (if SNMPv1 is required): If your environment requires continued use of SNMPv1 and migration is not currently possible, you may choose to remain on your device’s current firmware version that still supports SNMPv1. This approach should be considered temporary while planning a migration to SNMPv3. 

For more information on SNMP and how to configure it on the Cisco dashboard, refer to the Cisco Meraki documentation on SNMP.  

 

6. Who do I contact if I have additional questions? 

If you require assistance with your migration plan or have specific questions regarding your environment, please contact Meraki Support.