Foundry Networks FESX User Manual

Configuring Basic Software Features
December 2005 © Foundry Networks, Inc. 3 - 3
Configuring Simple Network Management Protocol (SNMP) Parameters
Use the procedures in this section to perform the following configuration tasks:
• Specify an SNMP trap receiver.
• Specify a source address and community string for all traps sent by the device.
• Change the holddown time for SNMP traps
• Disable individual SNMP traps. (All traps are enabled by default.)
• Disable traps for CLI access that is authenticated by a local user account, a RADIUS server, or a TACACS/
TACACS+ se r ve r.
NOTE: To add and modify “get” (read-only) and “set” (read-write) community strings, see the Foundry Security
Guide.
Specifying an SNMP Trap Receiver
You can specify a trap receiver to ensure that all SNMP traps sent by the Foundry device go to the same SNMP
trap receiver or set of receivers, typically one or more host devices on the network. When you specify the host,
you also specify a community string. The Foundry device sends all the SNMP traps to the specified host(s) and
includes the specified community string. Administrators can therefore filter for traps from a Foundry device based
on IP address or community string.
When you add a trap receiver, the software automatically encrypts the community string you associate with the
receiver when the string is displayed by the CLI or Web management interface. If you want the software to show
the community string in the clear, you must explicitly specify this when you add a trap receiver. In either case, the
software does not encrypt the string in the SNMP traps sent to the receiver.
To specify the host to which the device sends all SNMP traps, use one of the following methods.
To add a trap receiver and encrypt the display of the community string, enter commands such as the following:
To specify an SNMP trap receiver and change the UDP port that will be used to receive traps, enter a command
such as the following:
FESX424 Switch(config)# snmp-server host 2.2.2.2 0 mypublic port 200
FESX424 Switch(config)# write memory
Syntax: snmp-server host <ip-addr> [0 | 1] <string> [port <value>]
The <ip-addr> parameter specifies the IP address of the trap receiver.
The 0 | 1 parameter specifies whether you want the software to encrypt the string (1) or show the string in the clear
(0). The default is 0.
The <string> parameter specifies an SNMP community string configured on the Foundry device. The string can
be a read-only string or a read-write string. The string is not used to authenticate access to the trap host but is
instead a useful method for filtering traps on the host. For example, if you configure each of your Foundry devices
that use the trap host to send a different community string, you can easily distinguish among the traps from
different Foundry devices based on the community strings.
The command in the example above adds trap receiver 2.2.2.2 and configures the software to encrypt display of
the community string. When you save the new community string to the startup-config file (using the write
memory command), the software adds the following command to the file:
snmp-server host 2.2.2.2 1 <encrypted-string>
To add a trap receiver and configure the software to encrypt display of the community string in the CLI and Web
management interface, enter commands such as the following:
FESX424 Switch(config)# snmp-server host 2.2.2.2 0 FastIron-12
FESX424 Switch(config)# write memory
The port <value> parameter allows you to specify which UDP port will be used by the trap receiver. This
parameter allows you to configure several trap receivers in a system. With this parameter, IronView Network

Foundry Networks FESX Specifications

General

Brand	Foundry Networks
Model	FESX
Category	Switch
Language	English