Juniper Networks EX2500 Configuring Snmp Trap Hosts, SNMPv1 Trap Host Configuration, For example

Page 23

Chapter 1: Accessing the Switch

2.Configure a user access group, along with the views the group may access. Use the access table to configure the group’s access level. Because the read view, write view, and notify view are all set to iso, the user type has access to all private and public MIBs.

ex2500(config)# snmp-server access 5 name admingrp ex2500(config)# snmp-server access 5 level authpriv ex2500(config)# snmp-server access 5 read-view iso ex2500(config)# snmp-server access 5 write-view iso ex2500(config)# snmp-server access 5 notify-view iso

3.Assign the user to the user group. Use the group table to link the user to a particular access group.

ex2500(config)# snmp-server group 5 user-name admin ex2500(config)# snmp-server group 5 group-name admingrp

Configuring SNMP Trap Hosts

SNMPv1 Trap Host Configuration

1.Configure an entry in the notify table.

ex2500(config)# snmp-server notify 10 name public ex2500(config)# snmp-server notify 10 tag v1trap

2.Specify the IP address and other trap parameters in the targetAddr and targetParam tables. Use the following command to specify the username used with this targetParam table:

snmp-server target-parameters <1-16>user-name

For example:

ex2500(config)# snmp-server target-address 10 name v1trap address 10.70.70.190

ex2500(config)# snmp-server target-address 10 parameters-name v1param ex2500(config)# snmp-server target-address 10 taglist v1param ex2500(config)# snmp-server target-parameters 10 name v1param ex2500(config)# snmp-server target-parameters 10 user-name v1only ex2500(config)# snmp-server target-parameters 10 message snmpv1

SNMPv2 Trap Host Configuration

The SNMPv2 trap host configuration is similar to the SNMPv1 trap host configuration. Wherever you specify the model, use snmpv2 instead of snmpv1.

ex2500(config)# snmp-server read-community public

ex2500(config)# snmp-server target-address 1 name v2trap2 address 10.70.70.190 ex2500(config)# snmp-server target-address 1 parameters-name v2param2 ex2500(config)# snmp-server target-address 1 taglist v2param2 ex2500(config)# snmp-server target-parameters 1 name v2param2 ex2500(config)# snmp-server target-parameters 1 user-name v2only ex2500(config)# snmp-server target-parameters 1 message snmpv2 ex2500(config)# snmp-server notify 1 name public

ex2500(config)# snmp-server notify 1 tag v2param2

Using SNMP 9

Image 23

Contents North Mathilda Avenue Sunnyvale, CA Configuration GuideIi „ Table of Contents Chapter VLANs Rmon Overview Rmon Group 1-Statistics Rmon Group 2-History Chapter Ports and TrunkingIndexes Port Mirroring Overview Configuring Port MirroringAppendixes Port-Based Vlan Assignment Default Vlan SettingsPage List of Tables EX2500 Ethernet Switch Configuration Guide „ List of Tables Supported Platforms About This GuideObjectives AudienceIcon Meaning Description Documentation ConventionsRequesting Technical Support List of Technical PublicationsDocumentation Feedback Opening a Case with Jtac Self-Help Online Tools and ResourcesEX2500 Ethernet Switch Applications Page Configuring the Management Interface Accessing the SwitchConfigure the default gateway. Enable the gateway Dynamic Host Configuration ProtocolUsing the EX2500 Web Device Manager Using Telnet Configuring EX2500 Web Device Manager Access via Https Configuring EX2500 Web Device Manager Access via HttpSNMPv1, SNMPv2 Using SnmpSNMPv3 Default ConfigurationUser Configuration Configure an entry in the notify table Configuring Snmp Trap HostsSNMPv1 Trap Host Configuration SNMPv2 Trap Host ConfigurationSNMPv3 Trap Host Configuration Securing Access to the SwitchConfigure the Radius secret Radius Authentication and AuthorizationHow Radius Authentication Works Configuring Radius on the SwitchRadius Authentication Features in the EX2500 Switch Radius Attributes for EX2500 User Privileges Switch User AccountsTACACS+ Authentication Features in the EX2500 Switch TACACS+ AuthenticationHow TACACS+ Authentication Works „ starttime „ stoptime „ elapsedtime „ disccause Configure the TACACS+ secret and second secret Command Authorization and LoggingConfiguring TACACS+ Authentication on the Switch SSH Encryption of Management Messages Configuring SSH Features on the SwitchGenerating RSA Host and Server Keys for SSH Access Secure ShellSSH Integration with Radius and TACACS+ Authentication End User Access ControlUser Access Control Considerations for Configuring End User AccountsLogging In to an End User Account Listing Current UsersVlan Overview VLANsPvid Numbers „ Port configurationVLANs and Port Vlan ID Numbers Vlan NumbersVlan Tagging Illustrates the default Vlan settings on the switchDefault Vlan Settings Port-Based Vlan Assignment Vlan Topologies and Design Considerations Vlan Configuration RulesMultiple VLANs example in is described in Table Multiple VLANs Configuration ExampleEnable tagging on uplink ports that support multiple VLANs Private Vlan Ports Private VLANsVerify the configuration Private Vlan Configuration GuidelinesPrivate Vlan Configuration Example Configure a secondary Vlan and map it to the primary VlanSpanning Tree Overview Spanning Tree ProtocolBridge Priority Bridge Protocol Data Units BPDUsDetermining the Path for Forwarding BPDUs Port Path Cost Spanning Tree Group Configuration GuidelinesChanging the Spanning Tree Mode Port PriorityAdding and Removing Ports from STGs Creating a VlanRules for Vlan Tagged Ports Port State Changes Rapid Spanning Tree ProtocolEdge Port Rstp Configuration GuidelinesRstp Configuration Example Port Type and Link TypePer Vlan Rapid Spanning Tree Default Spanning Tree ConfigurationWhy Do We Need Multiple Spanning Trees? Configuring Pvrst Pvrst Configuration GuidelinesCommon Internal Spanning Tree Mstp Configuration GuidelinesMultiple Spanning Tree Protocol Mstp RegionImplementing Multiple Spanning Tree Groups Multiple Spanning Tree Groups Configuration ExampleVlan Fast Uplink ConvergenceConfiguring Fast Uplink Convergence Configuration GuidelinesStatistical Load Distribution Ports and TrunkingTrunking Overview Trunk Group Configuration Rules Built-In Fault ToleranceBefore Configuring Static Trunks Port Trunk Group Configuration Example Port Trunking Configuration ExampleFollow these steps on the EX2500 switch Define a trunk group „ Destination IP DIP Configurable Trunk Hash AlgorithmLink Aggregation Control Protocol „ Destination MAC Dmac48 „ Link Aggregation Control Protocol Set the Lacp mode Lacp Configuration GuidelinesConfiguring Lacp Optionally Reducing Lacp TimeoutEx2500config-if# lacp timeout short ex2500config-if# exit QoS Overview Quality of ServiceCOS Using ACL FiltersTo delete an IP Standard ACL MAC Extended ACLsIP Standard ACLs To delete a MAC Extended ACLTo delete an IP Extended ACL IP Extended ACLsTCP/UDP Understanding ACL PriorityACL Example 1-Blocking Traffic to a Host ACL Configuration ExamplesAssigning ACLs to a Port Viewing ACL StatisticsAdd the ACL to a port ACL Example 3-Blocking Http TrafficAssign the ACLs to a port ACL Example 4-Blocking All Except Certain PacketsBroadcast Storms Using Storm Control FiltersConfiguring Storm Control Differentiated Services Concepts Using Dscp Values to Provide QoSAssured Forwarding Drop Precedence Class Per Hop BehaviorDscp Mapping Use the following command to perform Dscp mappingQoS Levels Shows the priority bits in a VLAN-tagged packet Using 802.1p Priority to Provide QoSQueuing and Scheduling Rmon Overview Remote MonitoringRmon Group 1-Statistics Configure the Rmon statistics on a portRmon Group 2-History Configuring Rmon HistoryConfigure the Rmon History parameters for a port This configuration enables Rmon History collection on portConfigure the Rmon Alarm parameters to track Icmp messages Rmon Group 3-AlarmsAlarm MIB Objects Configuring Rmon AlarmsRmon Group 9-Events Ex2500config# rmon event 110 type log-onlyPage Igmp Snooping IgmpFastLeave IGMPv3 Snooping Igmp Snooping Configuration ExampleEx2500# show ip igmp groups Static Multicast RouterHigh Availability Overview High Availability Through Uplink Failure DetectionFailure Detection Pair Spanning Tree Protocol with UFD UFD Configuration GuidelinesMonitoring UFD UFD Configuration ExamplePage Appendixes EX2500 Ethernet Switch Configuration Guide 80 „ Appendixes Port Mirroring Overview „ Port Mirroring Overview on „ Configuring Port Mirroring onConfiguring Port Mirroring „ Index on IndexesEX2500 Ethernet Switch Configuration Guide 84 „ Indexes Numerics IndexInternet Group Management Protocol. See Igmp Management interface, configuringMulti-links between switches, port trunking Physical. See switch portsSegmentation. See IP subnets Segments. See IP subnets Quality of Service. See QoSQoS SecurityExample showing multiple VLANs Virtual Local Area Networks. See VLANs