F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices System Management and Maintenance Configuration Guide-6PW100

147
Ste
p
Command Remarks
5. Create or update a
MIB view.
snmp-agent mib-view { excluded |
included } view-name oid-tree
[ mask mask-value ]
Optional.
By default, the MIB view ViewDefault is
predefined and its OID is 1.
Each view-name oid-tree pair represents a
view record. If you specify the same record
with different MIB subtree masks multiple
times, the last configuration takes effect.
Except for the four subtrees in the default
MIB view, you can create up to 16 unique
MIB view records.
6. Configure the SNMP
access right.
• (Approach 1.) Create an SNMP
community:
snmp-agent community { read |
write } [ cipher ]
community-name [ mib-view
view-name ] [ acl acl-number |
acl ipv6 ipv6-acl-number ] *
• (Approach 2.) Create an SNMP
group, and add a user to the
SNMP group:
a. snmp-agent group { v1 |
v2c } group-name
[ read-view read-view ]
[ write-view write-view ]
[ notify-view notify-view ]
[ acl acl-number | acl ipv6
ipv6-acl-number ] *
b. snmp-agent usm-user { v1
| v2c } user-name
group-name [ acl
acl-number | acl ipv6
ipv6-acl-number ] *
Use either approach.
By default, no SNMP group exists.
In approach 2, the username is equivalent
to the community name in approach 1, and
must be the same as the community name
configured on the NMS.
Support for the acl ipv6 ipv6-acl-number
option varies with device.
7. Configure the
maximum size (in
bytes) of SNMP
packets for the
SNMP agent.
snmp-agent packet max-size
byte-count
Optional.
93B
Configuring SNMP logging
IMPORTANT:
Disable SNMP lo
gg
in
g
in normal cases to prevent a lar
g
e amount of SNMP lo
g
s from decreasin
g
device
performance.
The SNMP logging function logs Get requests, Set requests, and Set responses, but does not log Get
responses.