H3C S5810 Series, Руководство по эксплуатации

Страница: 678 / 820

1-10
Figure 1-4 Network diagram for SNMPv3
Configuration procedure
1) Configuring the agent
# Configure the IP address of the agent as 1.1.1.1/24 and make sure that there is a route between the
agent and the NMS. (The configuration procedure is omitted here)
# Configure the access right: the user can read and write the objects under the interface node with the
OID of 1.3.6.1.2.1.2, and cannot access other MIB objects. Set the user name to managev3user ,
authentication protocol to MD5 , authentication key to authkey , the privacy protocol to DES56 , and the
privacy password to prikey .
<Sysname> system-view
[Sysname] undo snmp-agent mib-view ViewDefault
[Sysname] snmp-agent mib-view included test interfaces
[Sysname] snmp-agent group v3 managev3group read-view test write-view test
[Sysname] snmp-agent usm-user v3 managev3user managev3group authentication-mode md5 authkey
privacy-mode des56 prikey
# Configure the contact person and physical location information of the Switch.
[Sysname] snmp-agent sys-info contact Mr.Wang-Tel:3306
[Sysname] snmp-agent sys-info location telephone-closet,3rd-floor
# Enable sending of traps to the NMS with an IP address of 1.1.1.2/24, using public as the community
name.
[Sysname] snmp-agent trap enable
[Sysname] snmp-agent target-host trap address udp-domain 1.1.1.2 udp-port 5000 params
securityname public
2) Configuring the SNMP NMS
SNMPv3 uses an authentication and privacy security model. On the NMS, the user needs to specify the
username and security level, and based on that level, configure the authentication mode, authentication
password, privacy mode, and privacy password. In addition, the timeout time and number of retries
should also be configured. The user can inquire and configure the device through the NMS.
The configurations on the agent and the NMS must match.