H3C S3100 Series, Operation Manual

Page: 681 / 1057

1-5
An S3100 Ethernet switch provides the following functions to prevent attacks through unused UDP
ports.
z
Executing the snmp-agent command or any of the commands used to configure SNMP agent
enables the SNMP agent, and at the same opens UDP port 161 used by SNMP agents and the
UDP port used by SNMP trap respectively.
z
Executing the undo snmp-agent command disables the SNMP agent and closes UDP ports used
by SNMP agent and SNMP trap as well.
Configuring Trap Parameters
Configuring Basic Trap
Trap messages refer to those sent by managed devices to the NMS without request. They are used to
report some urgent and important events (for example, the rebooting of managed devices).
Note that basic SNMP configuration is performed before you configure basic trap.
Table 1-4 Configure basic Trap
Operation Command Description
Enter system view system-view —
Enable the switch to send
Trap messages to NMS
snmp-agent trap enable [ configuration |
flash | standard [ authentication | coldstart
| linkdown | linkup | warmstart ]* | system | ]
Enter port view
or interface view
interface interface-type interface-number
Enable the port
or interface to
send Trap
messages
enable snmp trap updown
Enable
the port to
send Trap
messages
Quit to system
view
quit
Optional
By default, a port
is enabled to send
all types of Traps.
Set the destination for Trap
messages
snmp - agent target - host trap address
udp - domain { ip-address | ipv6
ipv6-address } [ udp - port port-number ]
params securityname security-string [ v1 |
v2c | v3 [ authentication | privacy ] ]
Required
Set the source address for
Trap messages
snmp-agent trap source interface-type
interface-number
Optional
Set the size of the queue used
to hold the Traps to be sent to
the destination host
snmp-agent trap queue-size size
Optional
The default is 100.
Set the aging time for Trap
messages
snmp-agent trap life seconds
Optional
120 seconds by
default.