Enterasys SecureStack C2, Руководство по настройке, Страница: 225 / 607

Creating a Basic SNMP Trap Configuration
SecureStack C2 Configuration Guide 6-37
Example
This example shows how to:
• Create an SNMP community called mgmt .
• Configure a trap notification called TrapSink .
This trap notification will be sent with the community name mgmt to the workstation
192.168.190.80 (which is target address tr ). It will use security and authorization criteria contained
in a target parameters entry called v2cExampleParams .
C2(su)->set snmp community mgmt
C2(su)->set snmp targetparams v2cExampleParams user mgmt
security-model v2c message-processing v2c
C2(su)->set snmp notify entry1 tag TrapSink
C2(su)->set snmp targetaddr tr 192.168.190.80 param v2cExampleParams taglist
TrapSink
How SNMP Will Use This Configuration
In order to send a trap/notification requested by a MIB code, the SNMP agent requires the
equivalent of a trap “door”, a “key” to unlock the door, and a “procedure” for crossing the
doorstep. To determine if all these elements are in place, the SNMP agent proceeds as follows:
1. Determines if the “keys” for trap “doors” do exist. In the example configuration above, the
key that SNMP is looking for is the notification entry created with the set snmp notify
command which, in this case, is a key labeled entry1 .
2. Searches for the doors matching such a key. For example, the parameters set for the entry1 key
shows that it opens only the door TrapSink .
3. Verifies that the specified door TrapSink is, in fact, available. In this case it was built using the
set snmp targetaddr command. This command also specifies that this door leads to the
management station 192.168.190.80 , and the “procedure” ( targetparams ) to cross the doorstep
is called v2ExampleParams .
4. Verifies that the v2ExampleParams description of how to step through the door is, in fact,
there. The agent checks targetparams entries and determines this description was made with
the set snmp targetparams command, which tells exactly which SNMP protocol to use and
what community name to provide. In this case, the community name is mgmt .
5. Verifies that the mgmt community name is available. In this case, it has been configured using
the set snmp community command.
6. Sends the trap notification message.
Create an SNMP target parameters entry. set snmp targetparams
Verify if any applicable SNMP notification
entries exist. show snmp notify
Create a new notification entry. set snmp notify
Create a target address entry. set snmp targetaddr
Table 6-11 Basic SNMP Trap Configuration (Continued)
To do this... Use these commands...