RE: Enable sending just RMON trap

From: Carlos Galvez (galvezc.ccie@gmail.com)
Date: Fri Apr 04 2008 - 10:42:38 ART


Hi,

Actually the line:

snmp-server host 130.1.17.100 IETRAP

Has nothing to do with RMON (or you did not paste the whole SNMP
configuration).. it will just redirect SNMP Traps to that address with that
RO community string, the issue here is the next line:

snmp-server enable traps

You enabled traps globally which means the device will send traps like crazy
for every single event going on. You can restrict the MIBs that will be
allowed to be monitored on the device and can go as specific as which OID
will be allowed to be sent. We have 2 ways to do this.

1. Under config mode enable traps but only for the services that you are
interested in (and remember to remove the line " snmp-server enable traps")

2. Configure SNMP Views (this one is a little more complicated but a whole
more secure) for the MIBs that will be allowed to be monitored on the
device.

Let me get you some links...

RMON configuration:
http://www.cisco.com/en/US/tech/tk961/technologies_configuration_example0918
6a0080093e96.shtml

How to chose the OIDs to be sent:
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080
094a05.shtml

You have to always take care when using SNMP, I really recommend v3 which is
also fun to configure, anyway here is a link for SNMP hardening.
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080
120f48.shtml

SNMP Views
http://www.cisco.com/en/US/docs/ios/12_4/netmgmt/configuration/guide/htnmsnm
p.html

Hope this helps.
Carlos Galvez

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of CCIE
Sent: Friday, April 04, 2008 12:19 AM
To: ccielab@groupstudy.com
Subject: Enable sending just RMON trap

Dear Experts,

Once I configure RMON to send it warnings to an snmp server

 

snmp-server host 130.1.17.100 IETRAP

snmp-server enable traps ! How I could restrict to send just RMON
traps instead of just enable all the traps support on my system

 

Regards,

Amin



This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:50 ART