No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S600-E V200R011C10 Web-based Configuration Guide

This document describes the configuration and maintenance of device through the web network management system. The web network management system provides the functions of viewing device information and managing the entire system, interfaces, services, ACL, QoS, routes, security, and tools.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
SNMP

SNMP

Simple Network Management Protocol (SNMP) is a standard network management protocol widely used on TCP/IP networks. SNMP uses a central computer (a network management station) that runs network management software to manage network elements.

SNMP Setting

Context

SNMP agent is an agent program on the managed device. The SNMP agent maintains information for the managed device, responds to the requests from the NMS, and sends management data to the NMS. Before the NMS manages a device through SNMP, the SNMP agent must be enabled on the device and a proper SNMP version needs to be selected.

A web system supports SNMPv1, SNMPv2c and SNMPv3. The device and NMS must use the same SNMP version.

NOTE:

If a device is managed by multiple NMSs running different SNMP versions, all the SNMP versions need to be set on the device so that the device can communicate with these NMSs.

Table 7-9  Usage scenarios of SNMP

Version

Usage Scenario

SNMPv1

Applicable to small networks with simple networking and low security requirements or small networks with good security and stability, such as campus networks and small enterprise networks.

SNMPv2c

Applicable to medium and large networks with low security requirements or with good security but on which services are so busy that traffic congestion may occur.

SNMPv3

Applicable to networks of various scales, especially networks that have strict security requirements and can be managed only by authorized network administrators. For example, SNMPv3 can be used if data between the NMS and managed device needs to be transmitted over a public network.

The community/group management configurations vary with SNMP versions. After global SNMP settings are complete, configure the communities/groups. Table 7-10 lists the mappings between SNMP versions and configurations.

Table 7-10  Mappings between SNMP versions and community/group configurations

Version

Configuration

SNMPv1

Community management

SNMPv2c

Community management

SNMPv1 and SNMPv2c

Community management

SNMPv3

Group management and user management

SNMPv1 and SNMPv3

Community management, group management and user management

SNMPv2c and SNMPv3

Community management, group management and user management

SNMPv1, SNMPv2c, and SNMPv3

Community management, group management and user management

Procedure

  1. Choose Maintenance > System Maintenance > SNMP and click the SNMP Setting tab, as shown in Figure 7-27.

    Figure 7-27  SNMP Setting

  2. For SNMP parameters, see Table 7-11.

    Table 7-11  SNMP configuration items

    Parameter

    Description

    SNMP
    Indicates the SNMP Agent status:
    • ON: SNMP Agent is enabled.
    • OFF: SNMP Agent is disabled.

    To manage devices using the NMS, enable the SNMP Agent function.

    Version number

    Indicates the SNMP version on the device.

    SNMPv1, SNMPv2c and SNMPv3 are supported. Choose one or multiple versions. Ensure that the SNMP versions on the device and on the NMS are the same.

    NOTE:

    SNMPv1 and SNMPv2c are not secure. SNMPv3 is recommended.

    Community name

    Indicates the read/write community name of SNMPv1, SNMPv2c and SNMPv3.

    This is the password that the NMS uses to perform the read and write operations on the SNMP agent. The password configured on the SNMP agent must be the same as that configured on the NMS.

    Confirm community name

    Confirms the community name. It must be the same as the community name.

    Clear Community

    Deletes all community names.

  3. If SNMPv3 is used, you need to configure groups and users.
    1. Click Create in Group to open the Create Group page, as shown in Figure 7-28.

      Figure 7-28  Create Group

      Table 7-12 describes parameters on the displayed page.

      Table 7-12  Create Group

      Parameter

      Description

      Group Name

      Indicates the SNMPv3 user group.

      Security Level

      Indicates the security level of the SNMPv3 user group:

      • No-auth&no-encrypt
      • Auth&no-encrypt
      • Auth&encrypt
      NOTE:

      When No-auth&no-encrypt is selected, there is a security risk. The Auth&encrypt mode is recommended.

      ACL

      Indicates the access control list for group management by the NMS on the device.

      Click and select an ACL in the dialog box.

    2. Set the required parameters.
    3. Click OK to complete the configuration.
    4. Click Create in User to open the Create User page. The configuration items vary according to the security level.

      • Set the security level to No-auth&no-encrypt, as shown in Figure 7-29.
        Figure 7-29  Create a user - No-auth&no-encrypt

        Table 7-13 describes parameters on the displayed page.

        Table 7-13  Create a user - No-auth&no-encrypt

        Parameter

        Description

        User Name

        Indicates the SNMPv3 user name.

        ACL

        Indicates the access control list for group management by the NMS on the device.

        Click and select an ACL in the dialog box.

        Group Name

        Indicates the user group to which users are added.

      • Set the security level to Auth&no-encrypt, as shown in Figure 7-30.
        Figure 7-30  Create a user - Auth&no-encrypt

        Table 7-14 describes parameters on the displayed page.

        Table 7-14  Create a user - Auth&no-encrypt

        Parameter

        Description

        User Name

        Indicates the SNMPv3 user name.

        Authentication protocol

        Indicates the authentication protocol:
        • MD5: HMAC-MD5-96
        • SHA: HMAC-SHA-96

        Authentication password

        Indicates the authentication password.

        Confirm authentication password

        Confirms the authentication password. It is the same as the authentication password.

        ACL

        Indicates the access control list for group management by the NMS on the device.

        Click and select an ACL in the dialog box.

        Group Name

        Indicates the user group to which users are added.

      • Set the security level to Auth&encrypt, as shown in Figure 7-31.
        Figure 7-31  Create a user - Auth&encrypt

        Table 7-15 describes parameters on the displayed page.

        Table 7-15  Create a user - Auth&encrypt

        Parameter

        Description

        User Name

        Indicates the SNMPv3 user name.

        Authentication protocol

        Indicates the authentication protocol:
        • MD5: HMAC-MD5-96
        • SHA: HMAC-SHA-96

        Authentication password

        Indicates the authentication password.

        Confirm authentication password

        Confirms the authentication password. It is the same as the authentication password.

        Encryption protocol

        Indicates the encryption protocol:
        • 3DES
        • AES128
        • AES192
        • AES256
        • DES56

        Encryption password

        Indicates the encryption password.

        Confirm encryption password

        Confirms the encryption password. It is the same as the encryption password.

        ACL

        Indicates the access control list for group management by the NMS on the device.

        Click and select an ACL in the dialog box.

        Group Name

        Indicates the user group to which users are added.

    5. Set the required parameters.
    6. Click OK.
  4. Click Apply to complete the configuration.

Trap Setting

You can configure the trap function on the device.

Context

NOTE:

This page is displayed only when the SNMP agent status in SNMP Setting is set to OFF.

A trap is an alarm message sent from the managed device to the NMS to notify administrators of the network faults. After receiving a trap from a managed device, the NMS does not need to reply.

Procedure

  • Configure trap.
    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab, as shown in Figure 7-32.

      Figure 7-32  Trap Setting

      Table 7-16 describes parameters on the displayed page.

      Table 7-16  Trap Setting

      Parameter

      Description

      SNMP Trap

      Indicates whether the SNMP trap function is enabled.

      Trap Source Interface

      Indicates the source interface for sending traps. The value depends on the device configuration.

    2. Set parameters.
    3. Click Apply to complete the configuration.
  • Configure the trap target host.

    Create a trap target host.

    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab.
    2. Click Create in Destination host receiving traps to open the Create Trap Host page, as shown in Figure 7-33.

      Figure 7-33  Create Trap Host

      Table 7-17 describes parameters on the Create Trap Host page.

      Table 7-17  Create Trap Host

      Parameter

      Description

      Destination host IP address

      Specifies the IP address of the target host.

      UDP port number of destination host

      Specifies the port receiving trap messages on the target host. The default port number is 162.

      Trap version

      Specifies the SNMP version matching the trap messages, including:

      • v1
      • v2c
      • v3

      User name

      Specifies the user name displayed on the NMS.
      • When the trap version is v1 or v2c, the user name is a string of 1 to 32 characters without spaces.
      • When the trap version is v3, the user name must be the same as the user name configured in Group Management.

      Security level

      This parameter is mandatory when the trap version is v3. Security levels include:

      • No-auth&no-encrypt
      • Auth&no-encrypt
      • Auth&encrypt

    3. Set parameters.
    4. Click OK. The configuration is complete.

    Delete the trap target host.

    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab.
    2. Select the items that you want to delete in Destination host receiving traps, or select all items.
    3. Click Delete. The system asks you whether to delete the items.
    4. Click OK. The configuration is complete.
Translation
Download
Updated: 2019-10-18

Document ID: EDOC1000178031

Views: 34159

Downloads: 9

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next