beautypg.com

Configuring snmp version 3 traps, Defining the udp port for snmp v3 traps – Brocade Virtual ADX Switch and Router Guide (Supporting ADX v03.1.00) User Manual

Page 20

background image

6

Brocade Virtual ADX Switch and Router Guide

53-1003246-01

Configuring basic system parameters

1

To disable logging of CLI access, enter the following commands.

Virtual ADX(config)# no logging enable user-login

Virtual ADX(config)# write memory

Virtual ADX(config)# end

Virtual ADX# reload

Syntax: [no] logging enable user-login

Configuring SNMP version 3 traps

Virtual ADX supports SNMP notifications in SMIv2 format. This allows notifications to be encrypted
and sent to the target hosts in a secure manner.

Defining an SNMP group and specifying which view is notified of traps

In software Enterprise release 07.8.02, the SNMP group command allows configuration of a
viewname for notification purpose, similar to the read and write view. The default viewname is "all",
which allows access to the entire MIB.

To configure an SNMP user group, first configure SNMP v3 views using the snmp-server view
command. Then enter a command such as the following.

Virtual ADX(config)# snmp-server group admin v3 auth read all write all

notify all

Syntax: [no] snmp-server group groupname

v1 | v2 | v3
auth | noauth | priv
[access standard-acl-id] [read viewstring | write viewstring | notify viewstring]

The group groupname parameter defines the name of the SNMP group to be created.

The v1, v2, or v3 parameter indicates which version of SNMP to use. In most cases, you will use v3,
since groups are automatically created in SNMP versions 1 and 2 from community strings.

The auth | noauth parameter determines whether or not authentication will be required to access
the supported views. If auth is selected, then only authenticated packets are allowed to access the
view specified for the user group. Selecting noauth means that no authentication is required to
access the specified view. Selecting priv means that an authentication password will be required
from the users.

The access standard-acl-id parameter is optional. It allows incoming SNMP packets to be filtered
based on the standard ACL attached to the group.

The read viewstring | write viewstring parameter is optional. It indicates that users who belong to
this group have either read or write access to the MIB.

The notify view allows administrators to restrict the scope of varbind objects that will be part of the
notification. All of the varbinds need to be in the included view for the notification to be created.

The viewstring variable is the name of the view to which the SNMP group members have access. If
no view is specified, then the group has no access to the MIB.

Defining the UDP port for SNMP v3 traps

Notifications can be configured in SMIv2 format, with or without encryption, in addition to the
SMIv1 trap format.