Snmp logging configuration example, Network requirements – H3C Technologies H3C SecPath F1000-E User Manual
Page 154
143
[SecPath] undo snmp-agent mib-view ViewDefault
[SecPath] snmp-agent mib-view included test interfaces
[SecPath] snmp-agent group v3 managev3group read-view test write-view test
[SecPath] snmp-agent usm-user v3 managev3user managev3group authentication-mode md5
authkey privacy-mode des56 prikey
# Configure contact person and physical location information for the SecPath.
[SecPath] snmp-agent sys-info contact Mr.Wang-Tel:3306
[SecPath] snmp-agent sys-info location telephone-closet,3rd-floor
# Enable traps, specify the NMS at 1.1.1.2 as a trap destination, and set the username to
managev3user for the traps.
[SecPath] snmp-agent trap enable
[SecPath] snmp-agent target-host trap address udp-domain 1.1.1.2 params securityname
managev3user v3 privacy
2.
Configure the SNMP NMS:
{
Specify the SNMP version for the NMS as v3.
{
Create two SNMP users: managev3user and public.
{
Enable both authentication and privacy functions.
{
Use MD5 for authentication and DES for encryption.
{
Set the authentication key to authkey and the privacy key to prikey.
{
Set the timeout time and maximum number of retries.
For information about configuring the NMS, see the NMS manual.
NOTE:
The configurations on the SecPath and the NMS must match.
3.
Verify the configuration:
{
After the above configuration, an SNMP connection is established between the NMS and the
SecPath. The NMS can get and configure the values of some parameters on the SecPath
through MIB nodes.
{
Execute the shutdown or undo shutdown command to an idle interface on the SecPath, and the
NMS receives the corresponding trap.
SNMP logging configuration example
Network requirements
Configure the SecPath (1.1.1.1/24) in
to log the SNMP operations performed by the NMS.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS