H3C Technologies H3C SecBlade NetStream Cards - Manual (Page 304)

289
[SecBlade] snmp-agent usm-user v3 managev3user managev3group authentication-mode md5
authkey privacy-mode des56 prikey
# Configure the contact person and physical location information of the device.
[SecBlade] snmp-agent sys-info contact Mr.Wang-Tel:3306
[SecBlade] snmp-agent sys-info location telephone-closet,3rd-floor
# Enable sending of traps to the NMS at IP address of 1.1.1.2/24, using managev3user as the user name.
[SecBlade] snmp-agent trap enable
[SecBlade] snmp-agent target-host trap address udp-domain 1.1.1.2 params securityname
managev3user v3 privacy
2. Configure the SNMP NMS
SNMPv3 uses an authentication and privacy security model. On the NMS, the user needs to specify the
username and security level, and based on that level, configure the authentication mode, authentication
key, privacy mode, and privacy key. In addition, the timeout time and number of retries should also be
configured. The user can inquire and configure the device through the NMS.
NOTE:
The configurations on the SecBlade and the NMS must match.
3. Verify the configuration
• After the above configuration, an SNMP connection is established between the NMS and the
SecBlade. The NMS can get and configure the values of some parameters on the SecBlade through
MIB nodes.
• Execute the shutdown or undo shutdown command to an idle interface on the SecBlade, and the
NMS receives the corresponding trap.
SNMP logging configuration example
Network requirements
• As shown in Figure 90 , the NMS and the SecBlade are connected through an Ethernet.
• The IP address of the NMS is 1.1.1.2/24
• The IP address of GigabitEthernet 0/1 on the SecBlade is 1.1.1.1/24
• Configure SNMP logging on the SecBlade to record the operations performed by the NMS to the
SecBlade
Figure 90 Network diagram for SNMP logging
Device
SecBlade
NMS
1.1.1.2/24
XGE4/0/1 XGE0/0
GE0/1
1.1.1.1/24
Console
Terminal