Creating a Basic SNMP Trap Configuration
SecureStack C2 Configuration Guide 6-37
Example
Thisexampleshowshowto:
• CreateanSNMPcommunitycalledmgmt.
• ConfigureatrapnotificationcalledTrapSink.
Thistrapnotificationwillbesentwiththecommunitynamemgmttotheworkstation
192.168.190.80(whichistargetaddresstr).Itwillusesecurityandauthorizationcriteriacontained
inatargetparametersentry
calledv2cExampleParams.
C2(su)->set snmp community mgmt
C2(su)->set snmp targetparams v2cExampleParams user mgmt
security-model v2c message-processing v2c
C2(su)->set snmp notify entry1 tag TrapSink
C2(su)->set snmp targetaddr tr 192.168.190.80 param v2cExampleParams taglist
TrapSink
How SNMP Will Use This Configuration
Inordertosendatrap/notificationrequestedbyaMIBcode,theSNMPagentrequiresthe
equivalentofatrap“door”,a“key”tounlockthedoor,anda“procedure”forcrossingthe
doorstep.Todetermineifalltheseelementsareinplace,theSNMPagentproceedsasfollows:
1. Determinesif
the“keys”fortrap“doors”doexist.Intheexampleconfigurationabove,the
keythatSNMPislookingforisthenotificationentrycreatedwiththesetsnmpnotify
commandwhich,inthiscase,isakeylabeledentry1.
2. Searchesforthedoorsmatchingsuchakey.Forexample,the
parameterssetfortheentry1key
showsthatitopensonlythedoorTrapSink.
3. VerifiesthatthespecifieddoorTrapSinkis,infact,available.Inthiscaseitwasbuiltusingthe
setsnmptargetaddrcommand.Thiscommandalsospecifiesthatthisdoorleadstothe
managementstation192.168.190.80,and
the“procedure”(targetparams)tocrossthedoorstep
iscalledv2ExampleParams.
4. Verifiesthatthev2ExampleParamsdescriptionofhowtostepthroughthedooris,infact,
there.Theagentcheckstargetparamsentriesanddeterminesthisdescriptionwasmadewith
thesetsnmptargetparamscommand,whichtellsexactlywhichSNMPprotocol
touseand
whatcommunitynametoprovide.Inthiscase,thecommunitynameismgmt.
5. Verifiesthatthemgmtcommunitynameisavailable.Inthiscase,ithasbeenconfiguredusing
thesetsnmpcommunitycommand.
6. Sendsthetrapnotificationmessage.
Create an SNMP target parameters entry. set snmp targetparams
Verify if any applicable SNMP notification
entries exist.
show snmp notify
Create a new notification entry. set snmp notify
Create a target address entry. set snmp targetaddr
Table 6-11 Basic SNMP Trap Configuration (Continued)
To do this... Use these commands...
To Next Page
Loading...
Need help?
General