Tavve zoneranger User Manual page 150

The Enable Single-Use SNMP Triggered Rules checkbox allows the TFTP proxy service to
auto-generate single use rules based on SNMP Set requests proxied via the Ranger Gateway.
For example, some devices can be instructed to save their configuration using an SNMP set.
The contents of the set will specify where the file should be saved. With this feature enabled,
the proxied SNMP set is inspected and recognized and the parameters are used to define a one
time only TFTP proxy rule, specific to the target device. The SNMP packet is then updated to
make the ZoneRanger the destination for the transfer. When the target device uses the
ZoneRanger for the TFTP transfer, the ZoneRanger finds the single use rule and proxies the
transfer to the actual destination originally specified in the SNMP set.
Note: This feature is triggered by sets using the CISCO-CONFIG-COPY-MIB (Cisco IOS
software release 12.0) and the OLD-CISCO-SYSTEM-MIB/OLD-CISCO-FLASH-MIB (Cisco
IOS software release 10.2 and later).
The SNMP triggered rules timeout field specifies the maximum life span for the SNMP
triggered single use rules. Afte r the timeout has expired, the rule will be discarded.
The TFTP Proxy Logging levels are:
Log Level
None
Short
Full
This TFTP Proxy log can be downloaded by the downloadFile command on a Ranger
Gateway. The log file may also be viewed on the View > Service Logs page. The log file is
called /log/tftp.log .
Configuring NTP Proxy
ZoneRanger has the capability to proxy NTP traffic from a ZoneRanger managed device to the
Ranger Gateway and return the response. The Configuration > Inbound Proxy page NTP tab
allows for the configuration of the NTP Proxy Servers as well as the logging of NTP proxy
requests.
ZoneRanger 5.5 User's Guide
Description
Logging is off
Basic information about each TFTP request,
including auto-generated single use rule
creation/usage/expiration events.
Additional information, such as the rule used for
each TFTP request
150