H3C Technologies H3C SecBlade IPS Cards - Manual (Page 69)

62
To do… Use the command… Remarks
Create an SNMP group and set
its access right
For SNMP v3:
snmp-agent group v3 group-name
[ authentication | privacy ]
[ read-view read-view ]
[ write-view write-view ]
[ notify-view notify-view ] [ acl
acl-number ]
Required
By default, the SNMP group
configured with the snmp-agent
group v3 command uses
non-authentication and
non-encryption.
Create or update a MIB view to
specify MIB objects that the NMS
can access
snmp-agent mib-view { excluded
| included } view-name oid-tree
[ mask mask-value ]
Required
The default view is ViewDefault.
Add a user to the SNMP group
snmp-agent usm-user v3
user-name group-name [ [ cipher ]
authentication-mode { md5 | sha }
auth-password [ privacy-mode
{ des56 | aes128 }
priv-password ] ] [ acl acl-number ]
Required
If you execute this command for the
same user repeatedly, the last
configuration takes effect.
Enable the ACFP server acfp server enable
Required
Disabled by default.
Enable the ACSEI server acsei server enable
Required
Disabled by default.
Create a VLAN and
enter VLAN view
vlan { vlan-id1 [ to vlan-id2 ] | all } Required
Return to system
view
quit Required
Create a VLAN
interface and enter
VLAN interface
view
interface Vlan-interface
vlan-interface-id
Required
Before creating the VLAN interface,
you need to create the corresponding
VLAN. Otherwise, the VLAN
interface cannot be created.
Configure an IP
address and a mask
for the VLAN
interface
ip address ip-address { mask |
mask-length } [ sub ] Required
Not configured by default.
Return to system
view
quit Required
Enter the view of the
10GE interface
connected to the
SecBlade IPS card
interface Ten-GigabitEthernet
interface-number
Required
Configure
the
internal
10GE
interface
Configure the link
type of the interface
as trunk
port link-type { access | hybrid |
trunk }
Required
By default, the link type of an
interface is access.