Foundry Networks Switch and Router Installation And Configuration Manual page 263

7. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the configuration change
to the startup-config file on the device's flash memory.
NOTE: You also can access the dialog for saving configuration changes by clicking on the plus sign next to
Command in the tree view, then clicking on Save to Flash.
Configuring Simple Network Management (SNMP) Parameters
Use the procedures in this section to perform the following configuration tasks:
• Specify an SNMP trap receiver.
• Specify a source address and community string for all traps sent by the device.
• Disable individual SNMP traps. (All traps are enabled by default.)
• Disable traps for CLI access that is authenticated by a local user account, a RADIUS server, or a TACACS/
TACACS+ server.
NOTE: To add and modify "get" (read-only) and "set" (read-write) community strings, see "Establishing SNMP
Community Strings" on page 3-14.
Specifying an SNMP Trap Receiver
You can specify a trap receiver to ensure that all SNMP traps sent by the Foundry device go to the same SNMP
trap receiver or set of receivers, typically one or more host devices on the network. When you specify the host,
you also specify a community string. The Foundry device sends all the SNMP traps to the specified host(s) and
includes the specified community string. Administrators can therefore filter for traps from a Foundry device based
on IP address or community string.
When you add a trap receiver, the software automatically encrypts the community string you associate with the
receiver when the string is displayed by the CLI or Web management interface. If you want the software to show
the community string in the clear, you must explicitly specify this when you add a trap receiver. In either case, the
software does not encrypt the string in the SNMP traps sent to the receiver.
To specify the host to which the device sends all SNMP traps, use one of the following methods.
USING THE CLI
To add a trap receiver and encrypt the display of the community string, enter commands such as the following:
BigIron(config)# snmp-server host 2.2.2.2 BigIron-12
BigIron(config)# write memory
Syntax: snmp-server host <ip-addr> [0 | 1] <string>
The <ip-addr> parameter specifies the IP address of the trap receiver.
The 0 | 1 parameter specifies whether you want the software to encrypt the string (1) or show the string in the
clear (0). The default is 1.
The <string> parameter specifies an SNMP community string configured on the Foundry device. The string can
be a read-only string or a read-write string. The string is not used to authenticate access to the trap host but is
instead a useful method for filtering traps on the host. For example, if you configure each of your Foundry devices
that use the trap host to send a different community string, you can easily distinguish among the traps from
different Foundry devices based on the community strings.
The command in the example above adds trap receiver 2.2.2.2 and configures the software to encrypt display of
the community string. When you save the new community string to the startup-config file (using the write
memory command), the software adds the following command to the file:
snmp-server host 2.2.2.2 1 <encrypted-string>
December 2000
Configuring Basic Features
10 - 5