Mss Reporting Mechanism; Configuring Mss - Avaya G250 Administration

MSS reporting mechanism

MSS notifications are sent to the active MGC by the dynamic trap manager. MSS notifications
sent to the active MGC by the dynamic trap manager are converted to syslog messages by the
SNMP trap manager on the MGC. For general information about configuring and enabling
syslog messages and syslog message format, refer to
page 188.
MSS notifications are intercepted and, if certain conditions are met, may be forwarded to the
Avaya Security Operations Center (SOC) as INADS alarms. The SOC is an Avaya service
group that handles DoS alerts, responding as necessary to any DoS attack or related security
issue.
Note:
The syslog messages on the active MGC are stored in the messages file on the
Note:
MGC hard disk. You can view the syslog messages through the Avaya
Maintenance Web Interface (MWI) if you want to debug security issues directly.
For information about how to view syslog messages, see
QoS fault traps, and QoS clear traps
Note:
Any additional SNMP recipients defined with the security notification group
Note:
enabled also receive the MSS notifications.

Configuring MSS

The MSS feature is automatically enabled and monitors all IP interfaces, including WAN data
interfaces, IPSEC tunnels, Ethernet LAN and WAN ports, VoIP engine interfaces, and Dialer
and serial PPP interfaces.
1. Make sure that the dynamic trap manager, which automatically sets the IP address of the
active MGC SNMP trap manager, is configured so that security notifications are sent to the
active MGC. By default, all types of notifications are enabled. You can use the show snmp
command to check which notification groups are configured to be sent to the active MGC.
You can modify the dynamic trap manager configuration using the snmp-server
dynamic-trap-manager command, setting the notification type to all or security.
Configuring a Syslog server
Viewing QoS traps,
on page 351.
Special security features
on
Issue 3 February 2007 61