第24章 SNMP配置

traps
& ip/name ip host traps public traps trap traps community-name version ip
traps
IP
192.168.0.100
example
SNMP
Router(config)#snmp-server host 192.168.0.100 traps community example version 2 n SNMPv3 ID
group-name v3 noauth authnopriv authpriv notify notify-view read read-view write write-view v3
& SNMPv3 MIB snmpv3 snmpv3 MIB
group1 view2
view3
view1
Router(config)#snmp-server group group1 v3 authpriv read view1 write view2 notify view2 view1 view2 view3 snmp-server view
n Router(config)#snmp-server contact Router(config)#snmp-server location & <LINE> <LINE>
n
SNMP SNMP
(
)
Copyright © 2005 Maipu Communication All Rights Reserved.
2
Router (config)#no snmp-server start & SNMP n trap Router (config)#snmp-server host ip/name [traps] [community community-name] [version {1|2}]
host ip/name traps community community-name version {1|2} trap IP traps
n router(config)#snmp-server address-param
proxyname {inform | trap |read | write} engineId address-param target-addr ID
SNMP
SNMP(Simple Network Management Protocol Network Managing Station Agent SNMP SNMP TCP/IP
24.1
SNMP
Router (config)#snmp-server ?
snmp-server start snmp-server community snmp-server contact snmp-server host snmp-server location snmp-server view snmp-server AddressParam snmp-server TargetAddress snmp-server engineID snmp-server engineGroup snmp-server send snmp-server group snmp-server notify snmp-server proxy snmp-server user notify notify SNMP trap SNMP SNMP
Copyright © 2005 Maipu Communication All Rights Reserved.
3
engineID
engineID
engineID 12345678 router(config)#snmp-server engineID local 12345678 router(config)#snmp-server engineID remote ip-address port-num engineID [engineGroup]
24.2
n
SNMP
router(config)#snmp-server
community
community-name
[view
view-name
[{ro|rw}]
Copyright © 2005 Maipu Communication All Rights Reserved.
1
[access-list]]
user1 group1 md5 123456 des 234567 Router(config)# snmp-server user user1 group1 v3 auth md5 123456 encrypt des 234567 2. user2 IP 1.1.1.1 162 sha 123456 des 123456 router(config)#snmp-server user user2 group1 remote 1.1.1.1 162 v3 auth sha 123456 encrypt des 123456
filter-name oid-subtree exclude include MIB MIB MIB
&
filter1
MIB
1.3.6.1
include
router(config)#snmp-server notify filter filter1 1.3.6.1 include
Copyright © 2005 Maipu Communication All Rights Reserved.
router(config)#snmp-server engineID ?
remote local engineID engineID
& SNMPv3 SNMPv3 SNMPv3 engineID engineID snmpEngineID SNMP IP UDP engineID
router(config)#snmp-server engineID local engineID
8
router(config)#snmp-server notify profile filter-name address-param
filter-name address-param
& SNMP OID OID MIB
filter1
aBiblioteka Baidudparam1
router(config)#snmp-server notify profile filter1 addparam1
community community-name view view-name {ro|rw} access-list
& conmunity-name {ro|rw} view access-list ro view rw
public
community
public
Router(config)#snmp-server community public rw & community snmpv1/v2c < ro/rw/view > rw(
ip-address port-num engineID [engineGroup] IP UDP engineID
& ip 0.0.0.0 ip-address
IP 1.1.1.1 162 engineID abcdef1234 Router(config)#snmp-server engineID remote 1.1.1.1 162 abcdef1234 n SNMPv3 router(config)#snmp-server engineGroup groupname usrname {auth|noauth|priv}
groupname usrname {auth|noauth|priv} usrname
& usrname snmpv3 (snmpv3 usrname username usrname { auth|noauth|priv }
group1,
user1,
priv
Copyright © 2005 Maipu Communication All Rights Reserved.
& SNMP snmpv3 snmpv3 taglist TargetAddress AddrssParam address-param
tag1
target1 IP tag2
1.1.1.1 UDP
162
addparam1
router(config)#snmp-server TargetAddress target1 1.1.1.1 162 addparam1 tag1,tag2 2 2
n SNMPv3 router(config)#snmp-server notify ?
filter notify profile
Copyright © 2005 Maipu Communication All Rights Reserved.
7
SNMPv3
SNMP
router(config)#snmp-server notify notify notify-name taglist inform
4
Router(config)#snmp-server engineGroup group1 user1 priv n SNMPv3 Router(config)#snmp-server group group-name v3 {noauth|authnopriv|authpriv} [notify notify-view] [read read-view] [write write-view]
notify-name taglist inform inform
& SNMPv3 SNMPv3
notify1
tag1
router(config)#snmp-server notify notify notify1 tag1 inform
router(config)#snmp-server notify notify filter-name oid-subtree {exclude|include}
n router(config)#snmp-server TargetAddress target-name ip-address port-num address-param taglist time-out retry-num
target-name ip-address port-num address-param taglist time-out retry-time UDP
& SNMPv3 SNMP MIB
addparam1 authpriv
v3
user1
Copyright © 2005 Maipu Communication All Rights Reserved.
6
router(config)#snmp-server AddressParam addparam1 v3 user1 authpriv
n
SNMPv3
Router(config) snmp-server user user-name group-name [remote ip-address portnum] v3 [auth {md5|sha} password [encrypt des password]]
user-name group-name remote ip-address portnum v3 auth {md5|sha} password IP v3 md5 sha
Copyright © 2005 Maipu Communication All Rights Reserved.
5
encrypt des password
des
& USM snmpv3 proxy snmpv3 SNMP IP engineID snmpv3 snmpv3 UDP snmpv3 snmpv3 noify
1.
n
SNMPv3 router(config)#snmp-server AddressParam address-name v3 user-name {noauth | authnopriv
| authpriv}
address-name v3 user-name noauth authnopriv authpriv SNMP v3