Configuring Snmp Secure Packet Mirroring Traps - Juniper E320 Configuration Manual

Configuring SNMP Secure Packet Mirroring Traps

To configure SNMP secure traps support, you perform the following tasks on your
E-series router:
1. Enable packet mirroring support.
2. Configure the packet mirroring application to generate traps.
3. (Optional) Verify the packet mirroring trap configuration.
4. (Optional) Configure the SNMP server to support secure logs.
5. Configure the SNMP server to generate packet mirroring traps.
6. Configure the SNMPv3 user for whom packet mirroring traps are generated.
7. Configure the SNMP server to report packet mirroring traps to a remote host.
8. (Optional) Verify the SNMP server's packet mirroring configuration.
The following example illustrates the procedure to configure SNMP secure packet
mirroring traps support:
host1#mirror-enable
host1#configure terminal
host1(config)#mirror trap-enable
host1(config)#run show mirror trap
Traps are enabled
host1(config)#snmp-server secure-log
host1(config)#snmp-server user fredMirrorUser group mirror authentication md5
fred-md5password privacy des fred-despassword
host1(config)#snmp-server enable traps packetMirror trapFilters notice
host1(config)#snmp-server host 192.168.57.103 version 3 fredMirrorUser
cliSecurityAlert packetMirror trapFilters notice
host1(config)#run show snmp trap
Enabled Categories: CliSecurity, PacketMirror, Sonet
SNMP authentication failure trap is disabled
Trap Source: FastEthernet 6/0, Trap Source Address:192.168.120.78
Trap Proxy: enabled
Global Trap Severity Level: 6 - informational
Address Security String
--------------- --------------------------------
192.168.1.1 host1
192.168.57.103 fredMirrorUser
192.168.57.162 host2
Address TrapSeverityFilter
--------------- ------------------ ------- --------- --------- -------------
192.168.1.1 5 - notice
192.168.57.103 5 - notice
192.168.57.162 2 - critical
Ver Port
--- -----
v1 162
v3 162
v3 162
Ping Maximum Queue
TimeOut QueueSize DrainRate discrd methd
1 32 0
1 32 0
1 32 0
Logging Packet Mirroring Information
Chapter 6: Packet Mirroring
Trap Categories
----------------
Cli
CliPacketMirror
Sonet
Queue Full
dropLastIn
dropLastIn
dropLastIn
! 183