Dell BigIron RX Series, Руководство по настройке

Страница: 194 / 1458

118 BigIron RX Series Configuration Guide
53-1002253-01
Configuring Simple Network Management Protocol traps
5
Configuring Simple Network Management Protocol traps
This section explains how to do the following:
•
Specify an SNMP trap receiver.
•
Specify a source address and community string for all traps that the device sends.
•
Change the holddown time for SNMP traps.
•
Disable individual SNMP traps. (All traps are enabled by default.)
•
Disable traps for CLI access that is authenticated by a local user account, a RADIUS server, or
a TACACS and server.
NOTE
To add and modify “get” (read-only) and “set” (read-write) community strings, refer to Chapter 4,
“Securing Access to Management Functions” .
Specifying an SNMP trap receiver
You can specify a trap receiver to ensure that all SNMP traps sent by the device go to the same
SNMP trap receiver or set of receivers, typically one or more host devices on the network. When you
specify the host, you also specify a community string. The device sends all the SNMP traps to the
specified hosts and includes the specified community string. Administrators can therefore filter for
traps from a device based on IP address or community string.
When you add a trap receiver, you can specify whether to have the community string encrypted or
to have it shown in the clear. In either case, the software does not encrypt the string in the SNMP
traps sent to the receiver.
To specify an SNMP trap receiver, enter a command such as the following.
BigIron RX(config)# snmp-server host 2.2.2.2 1 mypublic port 200
BigIron RX(config)# write memory
The first commands adds trap receiver 2.2.2.2, configures the software to encrypt display of the
community string, and designates the UDP port that will be used to receive traps. The second
command saves the community string to the startup configuration file, and the software adds the
following command to the file.
snmp-server host 2.2.2.2 1 <encrypted-string>
Syntax: snmp-server host <ip-addr> [0 | 1] <string> [port <value>]
The <ip-addr> parameter specifies the IP address of the trap receiver.
The 0 | 1 parameter specifies whether you want the software to encrypt the string (1) or show the
string in the clear (0). The default is 0.
The <string> parameter specifies an SNMP community string configured on the device. It can be a
read-only string or a read-write string. It is not used to authenticate access to the trap host, but it is
a useful method for filtering traps on the host. For example, if you configure each of your device
that use the trap host to send a different community string, you can easily distinguish among the
traps from the devices based on the community strings.