Enterasys Networks XSR-3020 VPN Site-to-Site Sample Configuration, Configure SNMP, Central Site

VPN Site-to-Site Sample Configuration

Configure SNMP

The previously configured ACL will be applied to all SNMP requests. Stricter ACLs can be written if tighter security controls are required.

XSR(config)#snmp-server community toMonitor1 ro 26

+Adds an SNMP community with read-only privileges attached to ACL 26

XSR(config)#snmp-server community toConfigure1 rw 26

+Adds another SNMP community with read-write privileges attached to ACL 26

XSR(config)#snmp-server enable traps

+Enables traps to be transmitted

XSR(config)#snmp-server contact support@enterasys.com

+Specifies contact information for the management server

XSR(config)#snmp location “HQ 2nd floor”

+Specifies the server locationr

XSR(config)#snmp-server host 192.168.2.101 traps trapCommunity

+Specifies management station to send traps to

XSR(config)#snmp-server host 192.168.2.102 traps trapCommunity

+Specifies another management station to send traps to

VPN Site-to-Site Sample Configuration

The following VPN topology, shown in Figure 3-5, configures a central site XSR to connect over IPSec tunnels with a remote ANG-1105 and two XSRs.

Figure 3-5 VPN Site-to-Site Topology

	Central Site		112.16.72.2
		112.16.244.9
112.16.1.221		ANG-1105	Branch Sites
		XSR
			112.16.76.2
XSR	Firewall	112.16.244.7
	112.16.244.10	XSR
	Gateway IP address
	for all remote sites		112.16.80.2
		112.16.244.5

The following script configures the VPN topology shown in Figure 3-5.

3-26 Software Configuration