Enabling Snmp Versions 1 And 2C Monitoring - D-Link NetDefendOS User Manual

STATUS current
DESCRIPTION "Total number of packets transmitted by the interface"
::= { clvIfStatsEntry 10 }
Enabling an IP Rule for SNMP
The advanced setting SNMP Before Rules controls if the IP rule set checks all accesses by SNMP
clients. By default, this is enabled and the recommendation is to always have this setting
enabled.
The effect of enabling this setting is to add an invisible Allow rule at the top of the IP rule set
which automatically permits accesses on port 161 from the network and on the interface
specified for SNMP access. Port 161 is usually used for SNMP and NetDefendOS always expects
SNMP traffic on that port.
Preventing SNMP Overload
The advanced setting SNMP Request Limit restricts the number of SNMP requests allowed per
second. This can help prevent attacks through SNMP overload.
Example 2.33. Enabling SNMP Versions 1 and 2c Monitoring
This example enables SNMP version 1 and 2c access via the lan interface from the network
mgmt-net using the community string Mg1RQqR.
Since the management client is on the internal network, there is no need for it to communicate
via a VPN tunnel.
Command-Line Interface
gw-world:/> add RemoteManagement RemoteMgmtSNMP my_snmp_v1-2
Should it be necessary to enable SNMP Before Rules (which is enabled by default) then the
command is:
gw-world:/> set Settings RemoteMgmtSettings SNMPBeforeRules=Yes
Web Interface
1. Go to: System > Device > Remote Management > Add > SNMP Management
2. Now enter:
• Name: my_snmp_v1-2
• SNMP Version: SNMPv1 and SNMPv2c
3. For Access Filter enter:
• Interface: lan
Chapter 2: Management and Maintenance
Interface=lan
Network=mgmt-net
SNMPGetCommunity=Mg1RQqR
113