Juniper J-Series Administration Manual page 78

J-series Services Router Administration Guide
Table 33: Configuring SNMP Agents and Communities
Task
Navigate to the SNMP level in the
configuration hierarchy.
Create and name a community.
Grant read-write access to the
community.
Allow community access to a
client at a particular IP
address—for example, at IP
address 10.10.10.10 .
Allow community access to a
group of clients—for example, all
addresses within the
prefix, except
10.10.10.0/24
those within the
10.10.10.10/29
prefix.
Managing SNMP Trap Groups (Required)
SNMP traps are unsolicited notifications that are generated by conditions on the
Services Router. When events trigger a trap, a notification is sent to the configured
clients for that particular trap group. To manage a trap group, you must create the
group, specify the types of traps that are included in the group, and define one or
more targets to receive the trap notifications.
To configure SNMP trap groups:
1.
2.
56
Configuring SNMP with a Configuration Editor
J-Web Configuration Editor
1. In the J-Web interface, select
Configuration>View and Edit>Edit
Configuration.
2. Next to Snmp, click Configure or Edit.
1. Next to Community, click Add new entry.
2. In the Community box, type the name of
the community as a free-form text string.
In the Authorization box, select read-write from
the list.
1. Next to Clients, click Add new entry.
2. In the Prefix box, type the IP address, in
dotted decimal notation.
3. Click OK.
1. Next to Clients, click Add new entry.
2. In the Prefix box, type the IP address
prefix 10.10.10.0/24
3. Next to Clients, click Add new entry.
4. In the Prefix box, type the IP address
prefix 10.10.10.10/29
5. Select the Restrict check box.
6. Click OK.
Navigate to the top of the configuration hierarchy in either the J-Web or CLI
configuration editor.
To configure SNMP trap groups, perform the configuration tasks described in
Table 34 on page 57.
CLI Configuration Editor
From the
edit snmp
Create a community:
set community community-name
Set the authorization to read-write:
set community community-name
authorization read-write
Configure client access for the IP
address
set community community-name clients
10.10.10.10
1. Configure client access for the IP
address
, and click OK.
set community community-name
clients 10.10.10.0/24
2. Configure client access to restrict
the IP addresses
.
set community community-name
clients 10.10.10.10/29 restrict
[edit] hierarchy level, enter
10.10.10.10 :
:
10.10.10.0/24
10.10.10.10/29 :