R3166-R3206-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

125
Ensure that the SNMP version specified in the snmp-agent target-host command is the same with that on
the NMS; otherwise, the NMS cannot receive any trap.
2. Configuring the SNMP NMS
With SNMPv1/v2c, the user needs to specify the read only community, the read and write community,
the timeout time, and number of retries. The user can inquire and configure the device through the NMS.
NOTE:
The configurations on the agent and the NMS must match.
3. Verify the configuration
• After the above configuration, an SNMP connection is established between the NMS and the agent.
The NMS can get and configure the values of some parameters on the agent through MIB nodes.
• Execute the shutdown or undo shutdown command to an idle interface on the agent, and the NMS
receives the corresponding trap.
SNMPv3 configuration example
Network requirements
• As shown in Figure 54, the NMS connects to the agent through an Ethernet.
• The IP address of the NMS is 1.1.1.2/24.
• The IP address of the agent is 1.1.1.1/24.
• The NMS monitors and manages the interface status of the agent using SNMPv3. The agent reports
errors or faults to the NMS. The inbound port for traps on the NMS is 5000.
Figure 54 Network diagram for SNMPv3
Configuration procedure
1. Configuring the agent
# Configure the IP address of the agent as 1.1.1.1/24 and make sure that there is a route between the
agent and the NMS. (The configuration procedure is omitted here)
# Configure the access right: the user can read and write the objects under the interface node with the
OID of 1.3.6.1.2.1.2, and cannot access other MIB objects. Set the user name to managev3user,
authentication protocol to MD5, authentication key to authkey, the privacy protocol to DES56, and the
privacy password to prikey.
<Sysname> system-view
[Sysname] undo snmp-agent mib-view ViewDefault
[Sysname] snmp-agent mib-view included test interfaces
[Sysname] snmp-agent group v3 managev3group read-view test write-view test
[Sysname] snmp-agent usm-user v3 managev3user managev3group authentication-mode md5
authkey privacy-mode des56 prikey
# Configure the contact person and physical location information of the device.
[Sysname] snmp-agent sys-info contact Mr.Wang-Tel:3306