ZXR10ZSRV2ConīægurationGuide(SystemManagement)
ConīgurationFlow
1.EnabletheSNMPantiābruteforceattackfunction.
2.Conīæguretheageingtimefordynamictrustedusers.
3.Conīægurestatictrustedusersthatareallowedtoaccessthesystem.
4.ConīægureaTrapmessageandlogthatisgeneratedwhenuserattemptsfailanda
stateisswitched.
ConīgurationCommand
RunthefollowingcommandsontheZXR10ZSRV2:
R1(config)#snmp-serversecurityblock1803180when5060
R1(config)#snmp-serversecuritydynamic-trust-useridle-timeout100
R1(config)#snmp-serversecuritystatic-trust-user169.1.110.6
R1(config)#snmp-serversecurityon-failurelogandTrap
ConīgurationVeriīcation
RunthefollowingcommandtocheckSNMPconīægurations.Theexecutionresultis
displayedasfollows.
R1(config)#showrunning-configsnmp
!<oam_snmp>
snmp-serversecurityblock1803180when5060
snmp-serversecuritydynamic-trust-useridle-timeout100
snmp-serversecurityon-failurelogandTrap
snmp-serversecuritystatic-trust-user169.1.110.6
!</oam_snmp>
6-14
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandConīædential