...
Here is the configuration relation diagram in SNMPv3.A user can be added to a group or not as you need.Once a user joined a group,one or more kinds of views (notfiy-view, write-view, read-view) must be configured.Besides, configurations on user change with the security-level of the group as below 3 diagrams. Note notify-view,write-view and read-view are optional but you have to choose at least one view.In the below diagram,view1,view2,view3 can be the same or different.
Info | ||
---|---|---|
| ||
Once created, the loopback interface will always remain UP. Unlike any VLAN interface which can go down accidentally, the loopback interfaces are more stable and hence a much better choice for the SNMP configuration. |
Configuring Basic Information
...
By default, trap messages are sent in the form of SNMPv2. But you can change it to SNMPv3 as below and designate NMS to which trap messages are sent. Note that in SNMPv3, security-name is user while in SNMPv2, security-name is community.
You can configure the source interface on the device from which traps are sent. The system specifies the IP address of this interface as the source IP address of traps. In this way, the trap source can be identified on the NMS. To ensure device security, it is recommended that you set the source interface to the loopback interface.
Code Block |
---|
admin@Xorplus# set l3-interface loopback lo address 10.226.14.201 prefix-length 32 admin@XorPlus# set protocols snmp trap-group version v3 admin@XorPlus# set protocols snmp trap-group targets 10.10.51.42 security-name user1 admin@Xorplus# set protocols snmp trap-group source-interface loopback admin@XorPlus# commit Commit OK. Save done. |
...