Set up SNMP credentials
Configure SNMP community strings to enrich discovered hosts with device details, interfaces, and neighbor data.
For background on how credentials work — types, scope models, resolution order, and auto-assignment — see Credentials.
Prerequisites
- SNMP (v2c) enabled on target devices
- UDP port 161 reachable from the daemon host to target devices
- Community strings for your devices (often
publicfor read-only access)
SNMPv2c sends community strings in cleartext on the wire. Use dedicated read-only community strings for Scanopy, and consider network segmentation to limit exposure. Scanopy encrypts credentials at rest and redacts them in API responses.
Creating a credential
- Go to Assets > Credentials
- Click Create Credential
- Select SNMP as the credential type
- Enter a name (e.g. "Core switches" or "Default read-only")
- Enter the community string
- Click Save
The community string is encrypted at rest and will not be shown again in the UI or API responses.
Assigning to a network
Creating a credential alone doesn't activate SNMP — you must assign it to a network or specific hosts.
- Go to Assets > Networks
- Select the network
- In the network settings, set the SNMP Credential
- Click Save
This activates SNMP for all hosts on the network. On the next discovery scan, the daemon will query every discovered host using this credential.
You can verify the assignment from Discover > Daemons — hover the Network chip to see whether an SNMP credential is configured.
Overriding credentials for specific hosts
In mixed environments where different devices use different community strings, you can override the network-level credential on individual hosts.
- Open the host edit modal (click the host, then Edit)
- Go to the SNMP tab
- Select a different SNMP credential
- Click Save
Host-level overrides take priority over the network default. See credential resolution order for the full priority chain.
Verifying SNMP is working
After assigning credentials, run a discovery scan and check the results:
- Go to Discover > Scan > Scheduled and run a discovery (or wait for the next scheduled run)
- Open a host that should have SNMP data
- Check for:
- sysName and sysDescr in the host details (SNMP tab)
- Interfaces in the ifEntry tab — interface names, speeds, and IP assignments
- LLDP/CDP neighbors in the topology view
If SNMP data isn't appearing, see SNMP troubleshooting for protocol-specific issues, or Credential troubleshooting for diagnosing credential loading and assignment using daemon logs.