Configuring Trap Destinations; Access Control - HP P4535A - Web Cache Server Appliance Administrator's Manual

Appendix D

Configuring trap destinations

You must modify the
You must configure the
snmpnotifyEntry
addresses for a host or group of hosts.
For example, to send traps to a host named
following:
snmpnotifyEntry 31 host_a trap nonVolatile
This line defines a trap destination named
addresses. In place of
place of , enter a unique integer.
31
Then, for each IP address that you want to define for
similar to the following. All trap messages destined for
snmpTargetAddrEntry
snmpTargetAddrEntry 34 snmpUDPDomain A.B.C.D:0 100 3 host_a v1ExampleParams
nonVolatile 255.255.255.255:0
In place of , enter a unique integer. In place of
34
.
host_a

Access control

By default, read-only access is granted to any host that makes SNMP requests using the community string
. To restrict access, you need to remove access-related default entries in the
public
entries specifying the hosts you want to allow. You must:
Define the hosts or host groups for your system (use the
addresses associated to each host or host group)
Define access communities (a community can consist of a host or group of hosts); you need to define hosts
before you can define communities
Give access to the communities that you want to have access; you need to define communities in order to
give them access
Example
To restrict access, remove the following default
vacmAccessEntry snmpv1 public Anyone nonVolatile
vacmAccessEntry snmpv2c public Anyone nonVolatile
snmpCommunityEntry t0000000 public public localSnmpID - nonVolatile
To allow access to selected hosts, replace the deleted entries with the following. You can allow access to as
many hosts as you want. You can configure one host at a time or one subnet at a time.
For example, suppose you want to allow the single host named
You would need the following lines in the
snmpTargetAddrEntry 33 snmpUDPDomain A.B.C.D:0 100 3 host_a v1ExampleParams
nonVolatile 255.255.255.255:0
snmpCommunityEntry localSnmpID public OneHost localSnmpID default host_
a nonVolatile
vacmAccessEntry OneHost - snmpv1 noAuthNoPriv exact All - All nonVolatile
vacmSecurityToGroupEntry snmpv1 public OneHost nonVolatile
file to send traps to each of your monitoring stations.
snmpd.cnf
and
snmpnotifyEntry
sends traps to a particular host or group of hosts.
host_a
host_a
, enter the name of the host or group of hosts to receive traps on your system. In
host_a
lines of the
snmpd.cnf
snmpd.cnf
snmpTargetAddrEntry
snmpTargetAddrEntry
, you need an
snmpnotifyEntry
which can represent a single IP address or a group of IP
, you must enter a
host_a
are sent to the IP addresses defined in the
host_a
file.
, enter the IP address that you want to define for
A.B.C.D
snmpTargetAddrEntry
entries, which allow access to any host:
snmpd.cnf
to have access to MIB information.
OneHost
file:
Configuration Files
entries for trap destinations.
defines the IP
line similar to the
snmpTargetAddrEntry
file and add
snmpd.cnf
lines to define the IP
line
215