ProCurve 3500yl Series, Руководство по управлению и настройке, Страница: 382 / 732

14-26
Configuring for Network Management Applications
Using SNMP Tools To Manage the Switch
An example of how to configure SNMPv3 notification is shown here:
Figure 14-9. Example of an SNMPv3 Notification Configuration
Managing Network Security Notifications
By default, a switch is enabled to send the SNMP notifications listed in
“Supported Notifications” on page 14-17 when a network security event (for
example, authentication failure) occurs. However, before security
notifications can be sent, you must first configure one or more trap receivers
or SNMPv3 management stations as described in:
■ “Configuring an SNMP Trap Receiver” on page 14-19
■ “Configuring SNMPv3 Notifications” on page 14-23
You can manage the default configuration of the switch to disable and re-
enable notifications to be sent for the following types of security events:
■ SNMP authentication failure
■ Port-security (web, MAC, or 802.1X) authentication failure
■ Invalid password entered in a login attempt through a direct serial, Telnet,
or SSH connection
■ Unable to establish a connection with the RADIUS or authen-
tication server
■ DHCP snooping events
■ ARP protection events
■ Manager password changes
The tag _name value in snmpv3 notify command matche s the
tag _name value in the snmpv3 targetaddress command.
Params _name value in the snmpv3 targetaddress command
matche s the params _name value in the snmpv3 params
command.
Configuring the security model ver3 requires you to configure
message processing ver3 and a security service level.
3500-5400-6200-8200-MCG-Jan08-K_13_01.book Page 26 Monday, January 28, 2008 10:04 AM