H3C Technologies H3C S6300 Series Switches - Manual (Page 273)

258
Configuring SNMP notifications for IKE
After you enable SNMP notifications for IKE, the IKE module notifies the NMS of important module events.
The notifications are sent to the device's SNMP module. You can configure the notification transmission
parameters for the SNMP module to specify how the SNMP module displays notifications. For more
information about SNMP notifications, see Network Management and Monitoring Configuration
Guide.
To generate and output SNMP notifications for IKE for a specific failure or event type, enable SNMP
notifications for IKE globally and for the specified type of failures or events.
To configure SNMP notifications for IKE:
Step Command Remarks
1. Enter system view system-view N/A
2. Enable SNMP
notifications for IKE
globally.
snmp-agent trap enable ike global
By default, SNMP notifications
for IKE are enabled.
3. Enable SNMP
notifications for the
specified failure or
event type.
snmp-agent trap enable ike [ attr-not-support
| auth-failure | cert-type-unsupport |
cert-unavailable | decrypt-failure |
encrypt-failure | invalid-cert-auth |
invalid-cookie | invalid-id | invalid-proposal
| invalid-protocol | invalid-sign |
no-sa-failure | proposal-add |
proposal–delete | tunnel-start | tunnel-stop
| unsupport-exch-type ] *
By default, SNMP notifications
for all failure and event types
are enabled.
Displaying and maintaining IKE
Execute display commands in any view and reset commands in user view.
Task Command
Display configuration information about all IKE
proposals.
display ike proposal
Display information about the current IKE SAs.
display ike sa [ verbose [ connection-id connection-id
| remote-address [ ipv6 ] remote-address ] ]
Delete IKE SAs. reset ike sa [ connection-id connection-id ]
Clear IKE MIB statistics. reset ike statistics