R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

140
Configuration procedure
For more information about the NMS and Firewall, see "SNMPv1/SNMPv2c configuration example"
and "SNMPv3 configuration example."
# Ena
ble displaying log messages on the configuration terminal. (This function is enabled by default.
Skip this step if you are using the default.)
<Firewall> terminal monitor
<Firewall> terminal logging
# Enable the information center to output the system information with the severity level equal to or higher
than informational to the console port.
<Firewall> system-view
[Firewall] info-center source snmp channel console log level informational
# Enable SNMP logging on the Firewall to log the GET and SET operations of the NMS.
[Firewall] snmp-agent log get-operation
[Firewall] snmp-agent log set-operation
# Verify the configuration:
Use the NMS to get a MIB variable from the Firewall. The following is a sample log message displayed
on the configuration terminal:
%Jan 1 02:49:40:566 2006 Sysname SNMP/6/GET:
seqNO = <10> srcIP = <1.1.1.2> op = <get> node = <sysName(1.3.6.1.2.1.1.5.0)> value=<>
Use the NMS to set a MIB variable on the Firewall. The following is a sample log message displayed on
the configuration terminal:
%Jan 1 02:59:42:576 2006 Sysname SNMP/6/SET:
seqNO = <11> srcIP = <1.1.1.2> op = <set> errorIndex = <0> errorStatus =<noError> node
= <sysName(1.3.6.1.2.1.1.5.0)> value = <Sysname>
Table 27 SNMP log message field description
Field Descri
p
tion
Jan 1 02:49:40:566 2006 Time when the SNMP log was generated.
seqNO Serial number automatically assigned to the SNMP log, starting from 0.
srcIP IP address of the NMS.
op SNMP operation type (GET or SET).
node MIB node name and OID of the node instance.
erroIndex Error index, with 0 meaning no error.
errorstatus Error status, with noError meaning no error.
value
Value set by the SET operation. This field is null for a GET operation.
If the value is a character string that has invisible characters or characters
beyond the ASCII range 0 to 127, the string is displayed in hexadecimal
format, for example, value = <81-43>[hex].
The information center can output system event messages to several destinations, including the terminal
and the log buffer. In this example, SNMP log messages are output to the terminal. To configure other
message destinations, see "Configuring the information center."