RE: SNMP Query

From: ccie2be (ccie2be@nyc.rr.com)
Date: Wed Jun 15 2005 - 09:32:05 GMT-3


Amit,

I'll answer the 2nd question.

For a router to send any traps to any host, you must enable traps.

This is done with the command, snmp-server enable traps.

Notice that no specific traps were added at the end of the command. This
means that ALL traps are enabled.

But, suppose you don't want to enable ALL traps, then you can specify the
specific traps you want enabled with this command by adding them at the end.

Now, suppose you want to send some traps to mgmt station A and other traps
to mgmt station B. You can do this by specifying which traps go to which
mgmt station with the command, snmp-server host.

Here's the kicker.

A router will only send the traps specified with the snmp-server host
command if those traps have already been enabled with the snmp-server enable
traps command.

IOW, the traps specified with the snmp host command must be a subset of the
traps that have been enabled.

Now, I think but I'm not 100% sure about this that if you don't specify
which traps to send to your mgmt station, by default, all enabled traps will
be sent.

What this means is that there are 2 ways to send a specific trap to a mgmt
station.

snmp-server enable traps
snmp-server host x.x.x.x traps vtp

This enables all traps but only sends vtp to your mgmt station

snmp-server enable traps vtp
snmp-server host x.x.x.x

This only enables the vtp trap and sends all enabled traps to your mgmt
station.

***************

Regarding passwords (community strings in snmp parlance), there are 2 types
of passwords you need to be aware of with snmp and it's important that you
don't get these confused.

1. The passwords that allow a mgmt station to access (R or R/W) the managed
device. These passwords protect your managed devices from being accessed by
a rogue mgmt station.

2. The passwords that prevent rogue devices from sending false or bad info
to a legit mgmt station - this is the password used in the snmp host
command.

HTH, Tim

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
netsteps@rediffmail.com
Sent: Wednesday, June 15, 2005 7:05 AM
To: ccielab@groupstudy.com
Subject: SNMP Query

Group

I could not get the difference between:
"snmp-server host 136.7.2.100 CISCOTRAP"
and
"snmp-server host 136.7.2.100 traps CISCOTRAP"

Logically they mean the same. Any help?

ALso if we have configured :
"snmp-server host 136.7.2.100 traps CISCOTRAP vtp"
then why do we need to specifically enable vtp traps again by:
"snmp-server enable traps vtp"

Wont first command enable vtp for that host??

Thanks

Amit Jain



This archive was generated by hypermail 2.1.4 : Wed Jul 06 2005 - 14:43:41 GMT-3