• Invalid password entered in a login attempt through a direct serial, Telnet, or SSH connection
• Manager password changes
• Port-security (web, MAC, or802.1X) authentication failure
• SNMP authentication failure
• Running configuration changes
Enabling or disabling notification/traps for network security failures and other security
events (CLI)
For more information, see Network security notifications on page 161.
Syntax:
[no] snmp-server enable traps [snmp-auth | password-change-mgr | login-failure-mgr
| port-security | auth-server-fail | dhcp-snooping | arp-protect | running-config-
change]
Enables or disables sending one of the security notification types listed below to configured trap receivers.
(Unless otherwise stated, all of the following notifications are enabled in the default configuration.)
The notification sends a trap:
arp-protect
If ARP packets are received with an invalid source or
destination MAC address, an invalid IP address, or an
invalid IP-to-MAC binding.
auth-server-fail
If the connection with a RADIUS or TACACS+
authentication server fails.
dhcp-snooping
If DHCP packets are received from an untrusted
source or if DHCP packets contain an invalid IP-to-
MAC binding.
dhcpv6-snooping
Set the traps for DHCPv6 snooping.
dyn-ip-lockdown
If the switch is out of hardware resources needed to
program a dynamic IP lockdown rule
dyn-ipv6-lockdown
Enable traps for Dynamic IPv6 lockdown..
link-change <port-list>
When the link state on a port changes from up to
down, or the reverse.
login-failure-mgr
For a failed login with a manager password.
password-change-mgr
When a manager password is reset.
mac-notify
Globally enables the generation of SNMP trap
notifications upon MAC address table changes.
nd-snooping
Set the trap for nd snooping
Table Continued
162 Aruba 2530 Management and Configuration Guide for
ArubaOS-Switch 16.05
To Next Page
Loading...
