Huawei S9300 Configuration Manual page 41

S9300&S9300E Terabit Routing Switch
Configuration Guide - Network Management
After a user is added to the user group, the NM station that uses the name of the user can access
the objects in the Viewdefault view (1.3.6.1).
If authentication and encryption have been enabled for the user group, the following
authentication and encryption modes can be configured for the data transmitted on the network.
l Authentication mode
l Encryption mode
Step 6 Choose one of the following commands as needed to configure the destination IP address for
the alarms and error codes sent from the device.
l To configure a destination IPv4 address for the alarms and error codes sent from the device,
l To configure a destination IPv6 address for the alarms and error codes sent from the device,
The descriptions of the command parameters are as follows:
l The default destination UDP port number is 162. In some special cases (for example, port
l The parameter securityname identifies the alarm sender, which will help you learn the alarm
l If the NM station and managed device are both Huawei products, the parameter private-
Step 7 (Optional) Run:
snmp-agent sys-info { contact contact | location location }
The equipment administrator's contact information or location is configured.
This step is required when the NM station administrator must know equipment administrators'
contact information and locations when the NM station manages many devices. This allows the
Issue 01 (2012-03-15)
NOTE
When configuring a security level for a user, ensure that the security level for the user is not lower than
the security level of the SNMP group to which the user belongs; otherwise, communication fails. If the
security level configured for the user is no authentication and no encryption, the user has permission to
access objects within MIB-2 and has only read property.
– Message Digest 5 (MD5): generates a 128-bit message digest for an input message of any
length.
– Secure Hash Algorithm (SHA-1): generates a 160-bit message digest for an input message
64
of less than 2 bits.
MD5 is faster than SHA-1, but is considered less secure.
DES uses a 56-bit key to encrypt a 64-bit plain text block.
run:
snmp-agent target-host trap address udp-domain ip-address params securityname
security-string [ v3 ]
run:
snmp-agent target-host trap ipv6 address udp-domain ip-address [ udp-port port-
number ] params securityname security-string [ v3 ] [ private-netmanager ]
mirroring is configured to prevent a well-known port from being attacked), the parameter
udp-port can be used to specify a non-well-known UDP port number. This ensures normal
communication between the NM station and managed device.
source.
NOTE
To enable SNMPv3 to send trap messages, set securityname to an existing user name and ensure that
the user has the right to send trap messages.
netmanager can be configured to add more information to alarms, such as the alarm type,
alarm sequence number, and alarm sending time. The information will help you locate and
rectify faults more quickly.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 SNMP Configuration
26