Simple Network Management Protocol

3-35

3
Web – Click SNMP, Configuration. Enter the IP address and community string for
each managment station that will receive trap messages, specify the UDP port and
SNMP version, and then click Add. Select the trap types required using the check
boxes for Authentication and Link-up/down traps, and then click Apply.
v
Figure 3-19. Configuring SNMP Trap Managers
CLI – This example adds a trap manager and enables both authentication and
link-up, link-down traps.
Configuring SNMPv3 Management Access
To configure SNMPv3 management access to the switch, follow these steps:
1. If you want to change the default engine ID, it must be changed first before
configuring other parameters.
2. Specify read and write access views for the switch MIB tree.
3. Configure SNMP user groups with the required security model (i.e., SNMP v1,
v2c or v3) and security level (i.e., authentication and privacy).
4. Assign SNMP users to groups, along with their specific authentication and
privacy passwords.

Setting an Engine ID

An SNMPv3 engine is an independent SNMP agent that resides on t he switch. This
engine protects against message replay, delay, and redirection. The engine ID is
also used in combination with user passwords to generate the security keys for
authenticating and encrypting SNMPv3 packets.
Console(config)#snmp-server host 192.168.1.19 private version 2c4-111
Console(config)#snmp-server enable traps authentication 4-112