Manuals / Nortel Networks / Computer Equipment / Network Router

Nortel Networks 8600 manual Technical Configuration Guide for SNMP, Ethernet Routing Switch

Models: 8600

1 41

Download 41 pages 17.31 Kb

Page 1

Image 1

Ethernet Routing Switch

8600

Engineering

>Technical Configuration Guide for SNMP

Enterprise Network Engineering

Document Date: December 15, 2006

Document Version: 2.0

Page 1

Image 1

Nortel Networks 8600 manual Technical Configuration Guide for SNMP, Ethernet Routing Switch, Engineering, Document Version

Contents

Ethernet Routing Switch Technical Configuration Guide for SNMPEngineering Enterprise Network Engineering Document Date December 15Disclaimer December AbstractNORTEL External DistributionSNMP WITH RADIUS AUTHENTICATION AND ACCOUNTING Table of ContentsCONFIGURATION EXAMPLE CHANGING SNMP COMMUNITIES 8. CONFIGURATION EXAMPLE USING SNMPV3List of Tables List of FiguresDecember NORTELFigure 1 SNMPv3 USM 1. SNMPv3 Overview2.1 Hidden File Details 2. SNMP Upgrade ConsiderationsERS-86105# config bootconfig flags block-snmp false ERS-86105# config bootconfig flags block-snmp truePP8600-B6# config snmp-v3 mib-view create v1v2only 1.3.6 type exclude 3. Blocking SNMPERS-86065# config sys access-policy policy ERS-86065# config sys access-policy enable true/falseERS-86065# config sys access-policy policy 1..65535 ? ERS-86065# config sys access-policy policy 1..65535 service ?3.2.1 Configuration Example Blocking SNMP via an Access Policy 3.3 SNMP Group Access Policy - Release 3.7.9, 4.1 or higherERS-86065# config sys access-policy enable true ERS-86065# config sys access-policy policy 2 createERS-86105# config sys access-policy policy 1 service ? 3.3.1 SNMPv3 Group Access Policy Configuration ExampleERS-86065# config sys access-policy enable true ERS-86065# config sys access-policy policy 2 createERS-86105# config sys access-policy policy 2 access-strict true 3.3.2 SNMPv1/2 Group Access Policy Configuration ExampleERS-86105# config sys access-policy policy 2 service telnet enable ERS-86105# config sys access-policy policy 2 service snmpv3 enableERS-86065# config sys access-policy policy 2 create ERS-86065# config sys access-policy enable trueERS-86065# config sys access-policy policy 2 name policy2 ERS-86065# config sys access-policy policy 2 accesslevel rwa3.3.3 SNMP Community Strings ERS-86065# config sys set snmp trap-recv ipaddr v2c public Where ERS-86065# config sys set snmp community rorwl2l3rwa commstringconfig snmp-v3 community create followed by ERS8600G3# config snmp-v3 community info ERS-86065# config snmp-v3 community info3.3.4 Modifying and/or adding community strings ERS-86065# config snmp-v3 community delete index2 ERS-86065# config snmp-v3 community delete index1ERS-86065# config snmp-v3 community create third readonly readview ParameterERS-86065# config snmp-v3 notify create Trap2 tag trapTag2 type trap ERS-86065# config snmp-v3 notify ?ERS-86065# config snmp-v3 target-addr ? ERS-86065# show snmp-v3 notify infoERS-86065# config snmp-v3 target-addr info ERS-86065# config snmp-v3 target-addr delete TAddr1ERS-86105# config snmp-v3 target-param info ERS-86065# config bootconfig flags hsecure falsetrue 3.4 New Default Community Strings in High Secure hsecure ModeERS-86065# config sys set snmp ? 4. SNMP Settingsconfig sys set snmp ERS-86065# config ip circuitless-ip-int 1 create 1.1.1.1/32v2.0 Technical Configuration Guide for SNMPDecember NORTEL5. SNMP with RADIUS Authentication and Accounting ERS-86105# config load-encryption-module DES /flash/filename.des 6. Configuring SNMPv3ERS-86105# config load-encryption-module 3DES /flash/filename.des ERS-86105# config load-encryption-module AES /flash/filename.aesERS-86105# config snmp-v3 group-member create user1 usm groupexample ERS-86105# config snmp-v3 usm infoERS-8610-C5# config snmp-v3 group-member info 6.3 Assign USM User to USM GroupERS-86105# config snmp-v3 group-access info 6.4 Assigning the USM Group Access Level6.5 Assigning the MIB View to the USM Group ERS-86105# config snmp-v3 mib-view infoERS-86105# config snmp-v3 group-access info ERS-86105# config snmp-v3 mib-view info 6.6 Creating a MIB ViewFigure 2 MIB Structure 7.1 Configuration Example SNMP Communities with Release 7. Configuration Example Changing SNMP CommunitiesERS-86065# config sys set snmp community rwa rwa123pp8600 ERS-86065# config sys set snmp community ro ro567pp86007.2 Configuration Example Changing the Default SNMP Community Name with Release 3.7 or ERS-8610-C5# config snmp-v3 group-access info ERS-8610-C5# config snmp-v3 community infoERS-8610-C5# config snmp-v3 group-member info initialviewv1v2only ERS-8610-C5# config snmp-v3 mib-view infov1v2only v1v2only7.4 Testing SNMP Using Device Manager ERS-86105# config snmp-v3 group-member create private snmpv1 noprivate ERS-86105# config load-encryption-module DES /flash/p80c3700.des 8. Configuration Example Using SNMPv3ERS-86105# config snmp-v3 group-member create user1 usm group1 ERS-86105# config snmp-v3 group-access create group1 usm authPrivERS-86105# config snmp-v3 usm create user2 md5 auth user2abcd 8.1 Testing SNMPv3 Using Device ManagerERS-86105# config snmp-v3 group-member create user2 usm group1 ERS-86105# config snmp-v3 group-access create group1 usm authNoPrivDecember 9. Software BaselineNORTEL External DistributionDocument Title 10. Reference DocumentationPublication Description11.1 From Configuration Example 11. Appendix A Configuration Files11.2 From Configuration Example Technical Configuration Guide for SNMP Contact us