ProCurve 3500yl Series, Руководство по управлению и настройке

Страница: 383 / 732

14-27
Configuring for Network Management Applications
Using SNMP Tools To Manage the Switch
To enable or disable notification/traps for network security failures and other
security events, enter the
snmp-server enable traps
command.
To determine the specific cause of a security event, check the event log in the
console interface to see why a trap was sent. For more information, refer to
“Using the Event Log for Troubleshooting Switch Problems” on page C-27.
To display the current configuration for network security notifications, enter
the
show snmp-server traps
command. Note that command output is a subset
of the information displayed with the
show snmp-server
command in Figure 14-
12.
Syntax: [no] snmp-server enable traps [snmp-auth | password-change-mgr | login-
failure-mgr | port-security | auth-server-fail | dhcp-snooping | arp-protect]
Enables or disables sending one of the following types of
security notification to configured trap receivers:
•
snmp-auth
sends a trap for a failed authentication attempt via SNMP.
•
password-change-mgr
sends a trap when a manager password is
reset.
•
login-failure-mgr
sends a trap for a failed login with a manager
password.
•
port-security
sends a trap for a failed authentication attempt through
a web, MAC, or 801.X authentication session.
•
auth-server-fail
sends a trap if the connection with a RADIUS or
authentication server fails.
•
dhcp-snooping
sends a trap if DHCP packets are received from an
untrusted source or if DHCP packets contain an invalid IP-to-MAC
binding.
•
arp-protect
sends a trap if ARP packets are received with an invalid
source or destination MAC address, an invalid IP address, or an invalid
IP-to-MAC binding.
3500-5400-6200-8200-MCG-Jan08-K_13_01.book Page 27 Monday, January 28, 2008 10:04 AM