Manuals / Cisco Systems / Computer Equipment / Switch

Cisco Systems WSC2960X24TSL Configuring Simple Network Management Protocol, SNMP Examples, page

Models: WSC2960X24TSL C2960XSTACK WSC2960X24PDL WSC2960X24TSLL WSC2960X24PSL WSC2960X48TSL WSC2960X24TDL

1 112

Download 112 pages 36.97 Kb

Page 55

Configuring Simple Network Management

C H A P T E R 4

Configuring Simple Network Management

Protocol

This chapter describes the Simple Network Management Protocol (SNMP) configuration.

•Finding Feature Information, page 43

•Prerequisites for SNMP, page 43

•Restrictions for SNMP, page 46

•Information About SNMP, page 46

•How to Configure SNMP, page 50

•Monitoring SNMP Status, page 62

•SNMP Examples, page 63

•Feature History and Information for Simple Network Management Protocol, page 64

Finding Feature Information

Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release.

Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

Prerequisites for SNMP

Supported SNMP Versions

This software release supports the following SNMP versions:

•SNMPv1—The Simple Network Management Protocol, a Full Internet Standard, defined in RFC 1157.

Catalyst 2960-X Switch Network Management Configuration Guide, Cisco IOS Release 15.0(2)EX

OL-29044-01

43

Image 55

Cisco Systems WSC2960X24TSL Configuring Simple Network Management Protocol, Prerequisites for SNMP, SNMP Examples, page

Contents

170 West Tasman Drive San Jose, CA Americas HeadquartersFirst Published July 10 Cisco Systems, IncCisco Systems, Inc. All rights reserved Using the Help System Understanding Abbreviated Commands Obtaining Documentation and Submitting a Service RequestUsing the Command-Line Interface Information About Using the Command-Line Interface Command ModesDeviceID Hostname and DeviceID Hostname, DeviceID, and ConfigID Cisco Configuration Engine Software Configuration ServiceEvent Service NameSpace Mapper Cisco Networking Services IDs and Device Hostnames 16 ConfigIDSNMP MIB Variables Access SNMP Notifications Feature History and Information for Cisco Discovery ProtocolConfiguring Simple Network Management Protocol Finding Feature Information Prerequisites for SNMPFSPAN and FRSPAN Configuration Guidelines SPAN and RSPAN Interaction with Other FeaturesDefault SPAN and RSPAN Configuration Configuration Guidelines SPAN Configuration Guidelines RSPAN Configuration GuidelinesOL-29044-01 Feature History and Information for SPAN and RSPANExamples Creating an RSPAN VLAN Contentsviii ContentsOL-29044-01 Document Conventions, page Related Documentation, page Obtaining Documentation and Submitting a Service Request, pagePreface Document ConventionsDescription Tip Means the following information will help you solve a problemReader Alert Conventions ConventionRelated Documentation Obtaining Documentation and Submitting a Service RequestOL-29044-01 Preface Obtaining Documentation and Submitting a Service RequestInformation About Using the Command-Line Interface, page Using the Command-Line InterfaceInformation About Using the Command-Line Interface Command Modesvlan-id command Access MethodAbout This Mode the configureCommand or Action Using the Help System2. abbreviated-command-entry ? 3. abbreviated-command-entry Tab 5. command ? 6. command keyword ?Lists all commands available for a particular command Understanding Abbreviated CommandsNo and default Forms of Commands CLI Error MessagesError Message How to Use the CLI to Configure FeaturesConfiguration Logging Configuring the Command Historymore recent commands Changing the Command History Buffer SizeRecalling Commands Repeat the key sequence to recall successively older commandsReenables the enhanced editing mode for the current terminal Enabling and Disabling Editing FeaturesDisabling the Command History Feature privileged EXEC modeCtrl-B or use the left arrow key Editing Commands through Keystrokesin the privileged EXEC mode terminal no editingEsc C Editing Command Lines That Wrap1. access-list 2. Ctrl-A 3. Return key Esc Dshow more command begin include exclude Searching and Filtering Output of show and more Commandsaccess-list 1. show more command begin include exclude regular-expressionCommand or Action Example Accessing the CLI through a Console Connection or through TelnetPurpose Accessing the CLI through a Console Connection or through Telnet Using the Command-Line InterfaceOL-29044-01 Prerequisites for Configuring the Configuration Engine, page Finding Feature InformationPrerequisites for Configuring the Configuration Engine Finding Feature Information, pageCisco Networking Services IDs and Device Hostnames, on page Restrictions for Configuring the Configuration EngineInformation About Configuring the Configuration Engine Cisco Configuration Engine SoftwareFigure 1 Cisco Configuration Engine Architectural Overview Configuration ServicePrerequisites for Configuring the Configuration Engine, on page Event ServiceCisco Networking Services IDs and Device Hostnames ConfigIDRefreshing DeviceIDs, on page Hostname, DeviceID, and ConfigIDDeviceID Hostname and DeviceIDRelated Topics Initial ConfigurationAutomated CNS Configuration, on page Cisco IOS CNS AgentsRequired Configuration Automated CNS ConfigurationIncremental Partial Configuration Synchronized ConfigurationEnabling the CNS Event Agent How to Configure the Configuration EngineInitial Configuration, on page 1. configure terminalWhat to Do Next configure terminalEnters the global configuration mode reconnect-time time backupcns config initial hostname ip-address Event Service, on page2. cns config initial hostname ip-address port-number 3. cns config partial hostname ip-address port-numberReturns to privileged EXEC mode Enabling an Initial Configuration for Cisco IOS CNS AgentEnables the Cisco IOS CNS agent and initiates a partial configuration on the switcheach command line in the template 1. configure terminal 2. cns template connect name3. cli config-text cli config-textStep 8 template name ... name Returns to global configuration modeexit Step 7 discover controller controller-type dlciaddress is network-number hostname string string udi event image commandhostname name ip route network-numberReturns to privileged EXEC mode port-number event no-persist pagepage source ip-address syntax-check Command or Action3. show cns event connections 1. show cns config connections5. configure terminal Refreshing DeviceIDscns event ip-address port-number show cns config connectionsshow cns event connections no cns event ip-address port-numberHostname and DeviceID, on page Enabling a Partial Configuration for Cisco IOS CNS Agentcns config partial ip-address hostname Enabling the Cisco IOS CNS Agent, on pageshow cns config stats Monitoring CNS ConfigurationsCommand show cns config outstandinginstallationlinux/guide/setup1.html Feature History and Information for the Configuration EngineConfiguration Engine Setup docs/netmgmt/configurationengine/1.5Feature History and Information for Cisco Discovery Protocol, page Configuring the Cisco Discovery ProtocolFinding Feature Information, page Information About CDP, page How to Configure CDP, page Monitoring and Maintaining CDP, pageFeature How to Configure CDPDefault CDP Configuration Configuring CDP Characteristicscdp holdtime seconds 1. configure terminal 2. cdp timer seconds 3. cdp holdtime secondscdp timer seconds 4. cdp advertise-v2 5. endMonitoring and Maintaining CDP, on page 1. configure terminal 2. no cdp run 3. endDisables CDP Disabling CDPEnabling CDP, on page 1. configure terminal 2. cdp run 3. endEnables CDP if it has been disabled Enabling CDPDisabling CDP, on page 3. no cdp enable 4. endand enters interface configuration mode Disabling CDP on an InterfaceEnabling CDP on an Interface no cdp enableDisables CDP on the interface specified in Step 3. cdp enable 4. endMonitoring and Maintaining CDP cdp enableEnables CDP on a disabled interface Resets the traffic counters to zeroshow cdp entry entry-name version protocol Configuring CDP Characteristics, on pageCisco IOS Configuration Fundamentals Command SwitchesLink Feature History and Information for Cisco Discovery ProtocolTechnical Assistance DescriptionPrerequisites for SNMP Configuring Simple Network Management ProtocolFinding Feature Information, page Prerequisites for SNMP, page How to Configure SNMP, page Monitoring SNMP Status, pageEncryption AuthenticationModel LevelEncryption AuthenticationModel LevelSNMP Manager Functions Restrictions for SNMPInformation About SNMP SNMP OverviewOperation SNMP MIB Variables AccessSNMP Agent Functions SNMP Community StringsSNMP ifIndex MIB Object Values SNMP NotificationsInterface Type Default SNMP ConfigurationSNMP Configuration Guidelines Default SettingBefore You Begin How to Configure SNMP1. configure terminal 2. no snmp-server 3. end Disabling the SNMP Agentno snmp-server Configuring Community StringsDisables the SNMP agent operation 3. access-list access-list-number deny permit source source-wildcardpermit source source-wildcard view view-name ro rw access-list-numberStep 3 access-list access-list-number deny Step 2 snmp-server community stringengineid-string remote ip-address Configuring SNMP Groups and Users5. end snmp-server engineID localauth-password priv des 3des aes 128 192 256 priv-password notifyview access access-listgroup-name remote host udp-port port v1 access access-list v2c access access-list v3 encrypted access access-list auth md5 shaPurpose Configuring SNMP NotificationsStep 5 end Example Command or Action Examplebridge configcopy-config Notification Type Keywordsnmp 1 snmp-server enable traps port-security2 snmp-server enable traps port-security trap-rate rate port-securityv2c access access-list v3 encrypted access 6. snmp-server enable traps notification-types9. snmp-server trap-timeout seconds 10. end host udp-port port v1 access access-listrange is 1 to 1000 the default is Step 6 snmp-server enable traps notification-types1 snmp-server enable traps port-security 2 snmp-server enable traps port-security trap-rate rate1. configure terminal 2. snmp-server contact text Setting the Agent Contact and Location Informationsnmp-server trap-timeout seconds to 1000 the default is 30 secondsSets the system contact string 2. snmp-server tftp-server-list access-list-numberLimiting TFTP Servers Used Through SNMP snmp-server contact textCommand or Action access-list-numberMonitoring SNMP Status Step 2 snmp-server tftp-server-listshow snmp engineID running-config outputSNMP Examples show snmpCisco IOS 15.02EX Switchconfig# snmp-server enable traps entityRelease ModificationFeature History and Information for SPAN and RSPAN, page Configuring SPAN and RSPANHow to Configure SPAN and RSPAN, page SPAN and RSPAN Configuration Examples, pageRSPAN Restrictions for SPAN and RSPANSPAN An RSPAN source session cannot have a local destination port Flow-Based SPAN FSPAN and Flow-Based RSPAN FRSPANRSPAN name Information About SPAN and RSPANSPAN and RSPAN Local SPANFigure 4 Example of Local SPAN Configuration on a Single Device Remote SPANFigure 5 Example of Local SPAN Configuration on a Device Stack SPAN Sessions, page Monitored Traffic Source Ports Source VLANs SPAN and RSPAN Concepts and TerminologyVLAN Filtering Destination Port RSPAN VLAN Monitored Traffic SPAN SessionsSource Ports VLAN Filtering Source VLANsDestination Port RSPAN VLAN SPAN and RSPAN Interaction with Other Features SPAN and RSPAN and Device Stacks Flow-Based SPANFeature Default SPAN and RSPAN ConfigurationConfiguration Guidelines SPAN Configuration GuidelinesCreating a Local SPAN Session How to Configure SPAN and RSPANRSPAN Configuration Guidelines FSPAN and FRSPAN Configuration Guidelinesboth rx tx Step 2 no monitor session sessionnumber all local remoteStep 3 monitor session sessionnumber source interface interface-id vlan vlan-idReturns to privileged EXEC mode Creating a Local SPAN Session and Configuring Incoming TrafficStep 5 end Command or Action Exampleinterface interface-id vlan vlan-id no monitor session sessionnumber alllocal remote monitor session sessionnumber sourceSpecifying VLANs to Filter Command or Actionuntagged encapsulation type with the specified VLAN as the default Returns to privileged EXEC modevlan-id Configuring a VLAN as an RSPAN VLANinterface interface-id Step 4 monitor session sessionnumber filter vlanremote-span 2. vlan vlan-id3. remote-span 4. end vlan vlan-id1. configure terminal Creating an RSPAN Source Session4. monitor session sessionnumber destination remote vlan vlan-id Step 2 no monitor session sessionnumber all local remoteCommand or Action monitor session sessionnumberdestination remote vlan vlan-id 5. monitor session sessionnumber destination remote vlan vlan-idconfigure terminal Step 2 no monitor session sessionnumber all local remoteStep 5 monitor session sessionnumber destination remote vlan vlan-id Command or Action6. monitor session sessionnumber source remote vlan vlan-id Creating an RSPAN Destination Session3. remote-span 4. exit 5. no monitor session sessionnumber all local remoteremote vlan vlan-id no monitor session sessionnumber alllocal remote monitor session sessionnumber sourceCommand or Action 3. monitor session sessionnumber source remote vlan vlan-idStep 3 monitor session sessionnumber source remote vlan vlan-id 1. configure terminal1. configure terminal Configuring an FSPAN SessionEnters global configuration mode Command or ActionStep 3 monitor session sessionnumber source Command or ActionStep 2 no monitor session sessionnumber all local remote Example6. remote-span 7. exit Configuring an FRSPAN Sessionaccess-list-number name 5. vlan vlan-idDETAILED STEPS Command or Actionconfigure terminal Enters global configuration modevlan vlan-id ipv6 mac access-group access-list-number nameor FRSPAN configuration Monitoring SPAN and RSPAN OperationsExample Configuring Local SPAN SPAN and RSPAN Configuration ExamplesModification Feature History and Information for SPAN and RSPANExamples Creating an RSPAN VLAN ReleaseSPAN Destination Port Support on defined in terms of access lists thatRelease ModificationI N D E