Capturing Snmp Secure Audit Logs - Juniper POLICY MANAGEMENT - CONFIGURATION GUIDE V11.1.X Configuration Manual

JUNOSe 11.1.x Policy Management Configuration Guide
Trap Proxy: enabled
Global Trap Severity Level: 6 - informational
Address
---------------
192.168.1.1
192.168.57.103
192.168.57.162
Address
--------------- ------------------ ------- --------- --------- -------------
192.168.1.1
192.168.57.103
192.168.57.162
Related Topics

Capturing SNMP Secure Audit Logs

SNMP secure audit logging enables administrators to collect the SNMP audit logs for
mirror traps and Mirror-MIB get/set operations with the protection of the mirror
enabling feature. Secure audit logging facilitates the debugging of issues related to
SNMP packet mirror traps.
All normal SNMP console and syslog audit logs (including snmpTrap, snmpPduAudit,
and snmpSetPduAudit) for secure traps and Mirror-MIB are suppressed due to security
concerns. When you have issued the mirror enable command, you can issue the
snmp secure-log command to capture secure audit logs. Configuration, storage, and
display of the SNMP secure logging is on global basis rather than a per-VR basis.
The SNMP agent captures and stores the audit logs for secure traps. The SNMP agent
also captures PDU audit logs for Mirror-MIB operations. Configure the snmpTrap,
snmpPduAudit, and snmpSetPduAudit logs at the proper severity level to capture
the secure audit logs.
You can use the show snmp secure-log command to display the captured secure
logs. Secure logs are stored in a string format similar to SNMP trap audit logs. You
can use the snmp-server clear secure-log command to reset the secure logs.
260
Capturing SNMP Secure Audit Logs
Security String
--------------------------------
host1
fredMirrorUser
host2
TrapSeverityFilter
5 - notice
5 - notice
2 - critical
Using SNMP Secure Packet Mirroring Traps on page 256
See Configuring SNMP in JUNOSe System Basics Configuration Guide for
information about JUNOSe software SNMP support.
mirror trap-enable
snmp-server clear secure-log
snmp-server enable traps
snmp-server host
snmp-server secure-log
show mirror trap
show snmp secure-log
Ver Port
--- -----
v1 162
v3 162
v3 162
Ping Maximum Queue
TimeOut QueueSize DrainRate discrd methd
1 32 0
1 32 0
1 32 0
Trap Categories
----------------
Cli
CliPacketMirror
Sonet
Queue Full
dropLastIn
dropLastIn
dropLastIn