Configuring snmp logging, Configuring snmp traps, Enabling snmp traps – H3C Technologies H3C SecPath F1000-E User Manual
Page 149
![background image](https://www.manualsdir.com/files/813034/content/doc149.png)
138
Configuring SNMP logging
Disable SNMP logging in normal cases to prevent a large amount of SNMP logs from decreasing device
performance.
The SNMP logging function logs Get requests, Set requests, and Set responses, but does not log Get
responses.
•
Get operation—The agent logs the IP address of the NMS, name of the accessed node, and node
OID.
•
Set operation—The agent logs the NMS' IP address, name of accessed node, node OID, variable
value, and error code and index for the Set operation.
The SNMP module sends these logs to the information center as informational messages. You can
configure the information center to output these messages to certain destinations, for example, the
console and the log buffer. The total output size for the node field (MIB node name) and the value field
(value of the MIB node) in each log entry is 1024 bytes. If this limit is exceeded, the information center
truncates the data in the fields. For more information about the information center, see "Configuring the
information center."
To configure SNMP logging:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable SNMP logging.
snmp-agent log { all |
get-operation | set-operation }
By default, SNMP logging is
disabled.
3.
Configure SNMP log output
rules.
info-center source { module-name |
default } channel { channel-number
| channel-name } [ debug { level
severity | state state } * | log { level
severity | state state } * | trap
{ level severity | state state } * ] *
Optional.
By default, SNMP logs are output
to loghost and logfile only. To
output SNMP logs to other
destinations such as the console or
a monitor terminal, set the output
destinations with this command.
Configuring SNMP traps
The SNMP agent sends traps to inform the NMS of important events, such as a reboot.
Traps fall into generic traps and vendor-specific traps. Available generic traps include authentication,
coldstart, linkdown, linkup and warmstart. All other traps are vendor-defined.
SNMP traps generated by a module are sent to the information center. You can configure the information
center to enable or disable outputting the traps from a module by severity and set output destinations. For
more information about the information center, see "Configuring information center."
Enabling SNMP traps
Enable SNMP traps only if necessary. SNMP traps are memory-intensive and may affect device
performance.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS