HP 6125XLG R2306-HP 6125XLG Blade Switch Network Management and Monitoring Con - Page 79

Configuring SNMP logging

Get HP 6125XLG PDF manuals and user guides View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals

Page 79 highlights

Step 10. (Optional.) Convert a plaintext key to an encrypted key. 11. Create an SNMPv3 user. 12. (Optional.) Configure the maximum SNMP packet size (in bytes) that the SNMP agent can handle. Command • In non-FIPS mode: snmp-agent calculate-password plain-password mode { md5 | sha } { local-engineid | specified-engineid engineid } • In FIPS mode: snmp-agent calculate-password plain-password mode sha { local-engineid | specified-engineid engineid } • In non-FIPS mode: snmp-agent usm-user v3 user-name group-name [ remote { ip-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ] ] [ { cipher | simple } authentication-mode { md5 | sha } auth-password [ privacy-mode { aes128 | des56 } priv-password ] ] [ acl acl-number | acl ipv6 ipv6-acl-number ] * • In FIPS mode: snmp-agent usm-user v3 user-name group-name [ remote { ip-address | ipv6 ipv6-address } [ vpn-instance vpn-instance-name ] ] { cipher | simple } authentication-mode sha auth-password [ privacy-mode aes128 priv-password ] [ acl acl-number | acl ipv6 ipv6-acl-number ] * snmp-agent packet max-size byte-count Remarks N/A If the cipher keyword is specified, the arguments auth-password and priv-password are used as encrypted keys. To send informs to an SNMPv3 NMS, you must configure the remote ip-address option to specify the IP address of the NMS. The default is 1500 bytes. Configuring SNMP logging Disable SNMP logging in normal cases to prevent a large amount of SNMP logs from decreasing device performance. The SNMP agent logs Get requests, Set requests, and Set responses, but does not log Get responses. • Get operation-The agent logs the IP address of the NMS, name of the accessed node, and node OID. • Set operation-The agent logs the NMS' IP address, name of accessed node, node OID, variable value, and error code and index for the Set operation. The SNMP module sends these logs to the information center as informational messages. You can configure the information center to output these messages to certain destinations, such as the console 73

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
73
Step
Command
Remarks
10.
(Optional.) Convert a plaintext
key to an encrypted key.
•
In non-FIPS mode:
snmp-agent calculate-password
plain-password
mode
{
md5 |
sha
}
{
local-engineid
|
specified-engineid
engineid
}
•
In FIPS mode:
snmp-agent
calculate-password
plain-password
mode
sha
{
local-engineid
|
specified-engineid
engineid
}
N/A
11.
Create an SNMPv3 user.
•
In non-FIPS mode:
snmp-agent
usm-user
v3
user-name
group-name
[
remote
{
ip-address
|
ipv6
ipv6-address
} [
vpn-instance
vpn-instance-name
] ] [ {
cipher
|
simple
}
authentication-mode
{
md5
|
sha
}
auth-password
[
privacy-mode
{
aes128
|
des56
}
priv-password
] ] [
acl
acl-number
|
acl
ipv6
ipv6-acl-number
] *
•
In FIPS mode:
snmp-agent
usm-user
v3
user-name
group-name
[
remote
{
ip-address
|
ipv6
ipv6-address
} [
vpn-instance
vpn-instance-name
] ] {
cipher
|
simple
}
authentication-mode
sha
auth-password
[
privacy-mode
aes128
priv-password
] [
acl
acl-number
|
acl
ipv6
ipv6-acl-number
] *
If the
cipher
keyword is specified,
the arguments
auth-password
and
priv-password
are used as
encrypted keys.
To send informs to an SNMPv3
NMS, you must configure the
remote
ip-address
option to
specify the IP address of the
NMS.
12.
(Optional.) Configure the
maximum SNMP packet size
(in bytes) that the SNMP agent
can handle.
snmp-agent packet max-size
byte
-
count
The default is 1500 bytes.
Configuring SNMP logging
Disable SNMP logging in normal cases to prevent a large amount of SNMP logs from decreasing device
performance.
The SNMP agent logs Get requests, Set requests, and Set responses, but does not log Get responses.
•
Get operation
—The agent logs the IP address of the NMS, name of the accessed node, and node
OID.
•
Set operation
—The agent logs the NMS' IP address, name of accessed node, node OID, variable
value, and error code and index for the Set operation.
The SNMP module sends these logs to the information center as informational messages. You can
configure the information center to output these messages to certain destinations, such as the console