Zte ZXR10 ZSR V2 Configuration Manual (System Management page 78

ZXR10 ZSR V2 Configuration Guide (System Management)
Steps
1. Activate the SNMP security function.
Command
ZXR10(config)#
block-seconds><detect-tries>< detect-seconds>[when
<tries><startup-seconds>]
block <block-seconds>: block time (length of the quiet period), unit: second, range:
1–65535.
< detect-tries>: maximum number of times of failed attempts in monitoring mode, range:
1–65535.
< detect-seconds>: maximum detection time in monitoring mode, unit: second, range:
1–65535.
<tries>: maximum number of times of failed attempts in normal mode, range: 1–65535,
default: 50.
<startup-seconds>: maximum detection time in normal mode, unit: second, range:
1–65535, default: 60.
2. Configure the ACL for controlling hosts that access the system through SNMP.
Command
ZXR10(config)#
ipv6}<acl-name>
3. Configure the ageing time of dynamic trusted users and configure static trusted users.
Step
1
2
4. Configure the generation of logs and Trap messages when community string attempts
fail or a state is switched.
Command
ZXR10(config)#
Trap]
SJ-20140504150128-007|2014-05-10 (R1.0)
snmp-server security block <
snmp-server access-list { ipv4|
Command
snmp-server security
ZXR10(config)#
dynamic-trust-user idle-timeout <timeout-seconds>
snmp-server security
ZXR10(config)#
static-trust-user <static-ip-addr>
snmp-server security on-failure log [and
Function
The SNMP security protection function
is disabled by default. This command
is used to activate this function.
Function
Uses a configured ACL to control
hosts that access the system through
SNMP.
Function
Configures the generation of logs
and Trap messages when community
string attempts fail or a state is
switched.
6-12
ZTE Proprietary and Confidential
Function
Configures the ageing time of
dynamic trusted users. Range:
1–65535, default: 1800 s.
Configures static trusted users that
are configured manually.