SonicWALL TELE3 SP, Руководство администратора

Страница: 86 / 210

Network Access Rules Page 85
The SonicWALL SNMP agent generates two traps: Cold Start Trap and Alert Traps . Cold
Start Traps indicates that the SonicWALL appliance is re-initializing itself so that the agent
configuration or the appliance can be altered. Alert Traps are based on the existing
SonicWALL alert messages which allows the trap messages to share a common message string
with the alerts. Accordingly, no trap message can exist without a corresponding alert message.
To configure
SNMP , enter the necessary information in the following fields:
1. To enable the SNMP agent, select Enable SNMP .
2. Enter the System Name. This is the hostname of the SonicWALL appliance.
3. In the System Contact field , type in the name of the network administrator for the
SonicWALL appliance.
4. Enter an e-mail address, telephone number, or pager number in the System Location
field.
5. Create a name for a group or community of administrators who can view SNMP data, and
enter it in the Get Community Name field.
6. Create a name for a group or community of administrators who can view SNMP traps, and
enter it in the Trap Community Name field.
7. Enter the IP address or hostname of the SNMP management system receiving the SNMP
traps in the Host 1 through 4 fields. Up to 4 addresses or hostnames can be specified.
Configuration of the Log/Log Settings for SNMP
Trap messages are generated only for the categories that alert messages are normally sent,
i.e. attacks, system errors, blocked Web sites. If none of the categories are selected on the
Log
Settings page, then none of the trap messages are sent out.
Configuration of the Service and Rules Pages
By default, the SonicWALL appliance responds only to SNMP Get messages received on its LAN
interface. Appropriate rules must be set up in the SonicWALL to allow SNMP traffic to and from
the WAN. SNMP trap messages can be sent via the LAN, WAN, or LAN interface.
If your SNMP management system supports discovery, the SNMP agent should automatically
discover the SonicWALL appliance on the network. Otherwise, you must add the SonicWALL
appliance to the list of SNMP manageable devices on the SNMP management system.
SonicWALL Remote Management
All SonicWALLs include a Management Security Association (SA) for secure remote
management. The Management SA does not permit access to remote network resources.
Note : If you have enabled VPN on your SonicWALL, the SonicWALL can be managed remotely
using a Management SA or with a VPN SA . See Chapter 10 for VPN configuration instructions
and basic VPN terms and concepts.