H3C S5100-SI Operation Manual page 514

2. Network diagram
图1-2 Network diagram for SNMP configuration
3. Network procedure
# Enable SNMP agent, and set the SNMPv1 and SNMPv2c community names.
<Sysname> system-view
[Sysname] snmp-agent
[Sysname] snmp-agent sys-info version all
[Sysname] snmp-agent community read public
[Sysname] snmp-agent community write private
# Set the access right of the NMS to the MIB of the SNMP agent.
[Sysname] snmp-agent mib-view include internet 1.3.6.1
# For SNMPv3, set:
SNMPv3 group and user
security to the level of needing authentication and encryption
authentication protocol to HMAC-MD5
authentication password to passmd5
encryption protocol to AES
encryption password to cfb128cfb128
[Sysname] snmp-agent group v3 managev3group privacy write-view internet
[Sysname] snmp-agent usm-user v3 managev3user managev3group authentication-mode md5 passmd5
privacy-mode aes128 cfb128cfb128
# Set the VLAN-interface 2 as the interface used by NMS. Add port GigabitEthernet 1/0/2, which is
to be used for network management, to VLAN 2. Set the IP address of VLAN-interface 2 as
10.10.10.2.
[Sysname] vlan 2
[Sysname-vlan2] port GigabitEthernet 1/0/2
[Sysname-vlan2] quit
[Sysname] interface Vlan-interface 2
[Sysname-Vlan-interface2] ip address 10.10.10.2 255.255.255.0
[Sysname-Vlan-interface2] quit
# Enable the SNMP agent to send traps to the NMS whose IP address is 10.10.10.1. The SNMP
community name to be used is public.
[Sysname] snmp-agent trap enable standard authentication
[Sysname] snmp-agent trap enable standard coldstart
[Sysname] snmp-agent trap enable standard linkup
[Sysname] snmp-agent trap enable standard linkdown
[Sysname] snmp-agent target-host trap address udp-domain 10.10.10.1 udp-port 5000 params
securityname public
1-7