Difference between revisions of "SNMP Cisco IOS"
From Teknologisk videncenter
(→SNMPv3) |
m (→Links) |
||
| (6 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
| − | [[Category:Cisco]][[Category:CCNP]][[Category:IOS]][[Category:Network]] | + | [[Category:Cisco]][[Category:CCNP]][[Category:IOS]][[Category:Network Management]] |
==Configuration== | ==Configuration== | ||
*Allows all NMS's to manage the device | *Allows all NMS's to manage the device | ||
| Line 23: | Line 23: | ||
<pre>snmp-server user snmp-user snmp-group v3 auth sha ciscodisco priv des56 ciscodisco</pre> | <pre>snmp-server user snmp-user snmp-group v3 auth sha ciscodisco priv des56 ciscodisco</pre> | ||
*Syntax | *Syntax | ||
| − | <pre>snmp-server user username groupname [remote ip-address [udp-port port]] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password]} [access access-list]</pre> | + | <pre>snmp-server user username groupname [remote ip-address [udp-port port]] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password]} [access access-list] |
| + | | [priv [des | 3des |aes] priv-password [access access-list] ]</pre> | ||
==SNMP traps== | ==SNMP traps== | ||
| Line 54: | Line 55: | ||
! | ! | ||
snmp-server host 1.1.1.1 informs version 2c ciscodisco</pre> | snmp-server host 1.1.1.1 informs version 2c ciscodisco</pre> | ||
| + | =Cisco MIB's= | ||
| + | Get from [http://tools.cisco.com/ITDIT/MIBS/servlet/index Cisco MIB Locater] | ||
| + | =Links= | ||
| + | *[http://tools.cisco.com/ITDIT/MIBS/servlet/index Cisco MIB Locater] | ||
Latest revision as of 12:57, 1 April 2010
Contents
Configuration
- Allows all NMS's to manage the device
SNMPv1+v2
- Read-only access
snmp-server community ciscodisco RO
- Read-write access
snmp-server community ciscodisco RW
- Only allow the NMS 1.1.1.1
snmp-server community ciscodisco RO 2 access-list 2 permit 1.1.1.1
SNMPv3
- Choose one of the security models
snmp-server group snmp-group v3 priv or snmp-server group snmp-group v3 auth or snmp-server group snmp-group v3 noauth
- Create a user and associate it with a group, specify the passwords and encryption
snmp-server user snmp-user snmp-group v3 auth sha ciscodisco priv des56 ciscodisco
- Syntax
snmp-server user username groupname [remote ip-address [udp-port port]] {v1 | v2c | v3 [encrypted] [auth {md5 | sha} auth-password]} [access access-list]
| [priv [des | 3des |aes] priv-password [access access-list] ]
SNMP traps
- Enable certain traps
snmp-server enable traps config-copy snmp-server enable traps bgp ...
- Enable all traps
snmp-server enable traps
- Control which traps are sent to who
snmp-server host 1.1.1.1 ciscodisco bgp snmp-server host 2.2.2.2 ciscodisco config-copy
SNMPv1 traps
snmp-server host 1.1.1.1 version 1 ciscodisco
or
snmp-server host 1.1.1.1 ciscodisco
SNMPv2 traps
snmp-server host 1.1.1.1 version 2c ciscodisco
SNMPv3 traps
snmp-server host 1.1.1.1 version 3 priv snmp-user
SNMP Informs
snmp-server enable traps ! snmp-server host 1.1.1.1 informs version 2c ciscodisco
Cisco MIB's
Get from Cisco MIB Locater