SupportDocumentationSwitchesCampus SwitchS3700&S5700&S6700Configuration & CommissioningConfiguration Guide

S2720, S5700, and S6700 V200R019C10 Web-based Configuration Guide

This document describes how to configure and maintain devices through the web NMS client, including device status statistics, SVF, interface, Ethernet switching, IP service, IP routing, security, ACL, AAA, system management, QoS, WLAN, diagnosis service, and EasyDeploy.

SNMP

SNMP

Global Configuration

Context

SNMP agent is an agent program on the managed device. The SNMP agent maintains information for the managed device, responds to the requests from the NMS, and sends management data to the NMS. Before the NMS manages a device through SNMP, the SNMP agent must be enabled on the device and a proper SNMP version needs to be selected.

A web system supports SNMPv1, SNMPv2c and SNMPv3. The device and NMS must use the same SNMP version.

If a device is managed by multiple NMSs running different SNMP versions, all the SNMP versions need to be set on the device so that the device can communicate with these NMSs.

Table 7-18 Usage scenarios of SNMP

Version

Usage Scenario

SNMPv1

Applicable to small networks with simple networking and low security requirements or small networks with good security and stability, such as campus networks and small enterprise networks.

SNMPv2c

Applicable to medium and large networks with low security requirements or with good security but on which services are so busy that traffic congestion may occur.

SNMPv3

Applicable to networks of various scales, especially networks that have strict security requirements and can be managed only by authorized network administrators. For example, SNMPv3 can be used if data between the NMS and managed device needs to be transmitted over a public network.

Procedure

  1. Choose Maintenance > System Maintenance > SNMP and click the Global Configuration tab, as shown in Figure 7-41.

    Figure 7-41 Global configuration

    Table 7-19 describes the global configuration parameters.

    Table 7-19 Global configuration parameters

    Parameter

    Description

    SNMP agent

    Specifies whether to enable the SNMP agent function.

    SNMP version

    Specifies the SNMP version.

    The device sends extended error code

    Specifies whether to enable the device to send extended error codes to the NMS.

    Local engine ID

    Displays the engine ID of the local SNMP entity.

    This parameter cannot be modified.

    Device position

    Specifies the location of a device.

    Contact

    Specifies the maintenance contact information.

  2. Set the parameters.
  3. Click Apply to complete the configuration.

Community/Group Management

Procedure

  • Creating a community
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.

      Figure 7-42 Community/Group management

    2. In the Community (For SNMPv1 and SNMPv2c) area, click Create. The Create Community dialog box is displayed, as shown in Figure 7-43.

      Figure 7-43 Creating a community

      Table 7-20 describes the parameters in the dialog box.

      Table 7-20 Community parameters

      Parameter

      Description

      Community name

      Specifies the community name.

      Access mode

      Specifies the permission on a specified MIB view for the community name.

      • Read-only
      • Read-write

      MIB View

      Specifies the MIB view that the community name can access.

      ACL number

      Specifies the ACL number matching the community name.

    3. Set the parameters.
    4. Click OK.
  • Deleting a community
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. Select the community you want to delete and click Delete. The system asks you whether to delete the community.
    3. Click OK.
  • Updating community information
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. In the Community (For SNMPv1 and SNMPv2c) area, click Refresh.
  • Creating a group
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. In the Group (For SNMPv3) area, click Create. The Create Group dialog box is displayed, as shown in Figure 7-44.

      Figure 7-44 Creating a group

      Table 7-21 describes the parameters in the dialog box.

      Table 7-21 Group parameters

      Parameter

      Description

      Group Name

      Specifies a group name.

      Security Level

      Specifies the security level for the SNMP group.

      ACL

      Specifies the ACL number matching the group.

      Click and select an ACL in the dialog box.

  • Modifying a group
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. Click a group name to access the Modify Group page. Table 7-21 describes the parameters on the page.
    3. Modify the configuration parameters. Group Name cannot be modified.
    4. Click OK.
  • Deleting a group
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. Select the group you want to delete and click Delete. The system asks you whether to delete the group.
    3. Click OK.
  • Updating group information
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. In the Group (For SNMPv3) area, click Refresh.
  • Creating a user
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. In the User (For SNMPv3) area, click Create. The Create User dialog box is displayed, as shown in Figure 7-45.

      Figure 7-45 Creating a user

      Table 7-22 describes the parameters in the dialog box.

      Table 7-22 User parameters

      Parameter

      Description

      User Name

      Specifies a user name.

      Security Level

      Specifies the security level for the user.

      Authentication protocol

      Sets the authentication protocol to SHA or MD5.

      This parameter is available only when Security Level is set to Auth & no-encrypt or Auth & encrypt.

      Authentication password

      Specifies an authentication password for the user.

      This parameter is available only when Security Level is set to Auth & no-encrypt or Auth & encrypt.

      Confirm authentication password

      Confirms the authentication password.

      This parameter is available only when Security Level is set to Auth & no-encrypt or Auth & encrypt.

      Encryption protocol

      Sets the encryption protocol to DES-56, AES-128, AES-192, AES-256, or 3DES.

      This parameter is available only when Security Level is set to Auth & encrypt.

      Encryption password

      Specifies an encryption password for the user.

      This parameter is available only when Security Level is set to Auth & encrypt.

      Confirm encryption password

      Confirms the encryption password.

      This parameter is available only when Security Level is set to Auth & encrypt.

      ACL

      Specifies the ACL number matching the user.

      Click and select an ACL in the dialog box.

      Group Name

      Specifies an SNMP group name.

  • Modifying a user
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. Click a user name to access the Modify User page. Table 7-22 describes the parameters on the page.
    3. Modify the configuration parameters. User Name cannot be modified.
    4. Click OK.
  • Deleting a user
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. Select the user you want to delete and click Delete. The system asks you whether to delete the user.
    3. Click OK.
  • Updating user information
    1. Choose Maintenance > System Maintenance > SNMP and click the Community/Group Management tab, as shown in Figure 7-42.
    2. In the User (For SNMPv3) area, click Refresh.

MIB View

Procedure

  • Creating a MIB view
    1. Choose Maintenance > System Maintenance > SNMP and click the MIB View tab, as shown in Figure 7-46.

      Figure 7-46 MIB View page

    2. In the MIB View area, click Create. The Create View Rule dialog box is displayed, as shown in Figure 7-47.

      Figure 7-47 Creating a view rule

      Table 7-23 describes the parameters in the Create View Rule dialog box.

      Table 7-23 View rule parameters

      Parameter

      Description

      View name

      Specifies the name of a MIB view.

      Rule

      Specifies the permission of the MIB view on MIB subtrees.

      MIB sub-tree name

      Specifies the OID for a MIB subtree, which can be the OID (such as 1.4.5.3.1) or the name (such as system) of the subtree.

      To add a data record, click . Multiple data records can be added. To delete a data record, select it and click .

    3. Set the parameters.
    4. Click OK.
  • Modifying a MIB view
    1. Choose Maintenance > System Maintenance > SNMP and click the MIB View tab, as shown in Figure 7-46.
    2. Click a MIB view name to access the Modify MIB View page. Table 7-23 describes the parameters on the page.
    3. Modify the configuration parameters. View Name cannot be modified.
    4. Click OK.
  • Deleting a MIB view
    1. Choose Maintenance > System Maintenance > SNMP and click the MIB View tab, as shown in Figure 7-46.
    2. Select the MIB view you want to delete and click Delete. The system asks you whether to delete the MIB view.
    3. Click OK.
  • Displaying view rules
    1. Choose Maintenance > System Maintenance > SNMP and click the MIB View tab, as shown in Figure 7-46.
    2. Select the MIB view you want to display and click Display View Rule. The system displays the view rules of the MIB view.
  • Updating view rules
    1. Choose Maintenance > System Maintenance > SNMP and click the MIB View tab, as shown in Figure 7-46.
    2. In the MIB View area, click Refresh.

Trap Setting

Context

This page is displayed only when the SNMP agent status in SNMP Setting is set to ON.

A trap is an alarm message sent from the managed device to the NMS to notify administrators of the network faults. After receiving a trap from a managed device, the NMS does not need to reply.

Procedure

  • Configure the trap function.
    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab, as shown in Figure 7-48.

      Figure 7-48 Trap Setting

      Table 7-24 describes parameters in the Trap Setting area.

      Table 7-24 Trap parameters

      Parameter

      Description

      SNMP Trap

      Specifies whether to enable the switch to send traps to the NMS.

      TTL of trap messages (s)

      Sets the TTL of traps. If the TTL expires, the traps are discarded.

      Length of the trap message queue

      Specifies the length of the queue for traps sent to target hosts.

      Trap Source Interface

      Specifies the source port for sending traps.

    2. Set parameters.
    3. Click Apply to complete the configuration.
  • Create a trap target host.
    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab, as shown in Figure 7-48.
    2. Click Create in Destination host receiving traps to open the Create Trap Host page, as shown in Figure 7-49.

      Figure 7-49 Creating a trap target host

      Table 7-25 describes parameters in the Create Trap Host dialog box.

      Table 7-25 Trap host parameters

      Parameter

      Description

      Destination host IP address

      Specifies the IP address of the target host.

      UDP port number of destination host

      Specifies the number of the port for receiving traps on the target host.

      Trap version

      Specifies the SNMP version matching the trap messages, including:

      • v1: SNMPv1.
      • v2c: SNMPv2c.
      • v3: SNMPv3.

      User name

      Specifies the user name displayed on the NMS.

      Security level

      This parameter is mandatory when the trap version is v3. Security levels include:

      • No-auth&no-encrypt
      • Auth&no-encrypt
      • Auth&encrypt

    3. Set parameters.
    4. Click OK. The configuration is complete.
  • Modify a trap target host.
    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab, as shown in Figure 7-48.
    2. Click the IP address of a trap target host you want to modify to access the Modify Trap Host page. Table 7-25 describes the parameters on the page.
    3. Modify the configuration parameters. Destination host IP address and User name cannot be modified.
    4. Click OK.
  • Delete a trap target host.
    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab, as shown in Figure 7-48.
    2. Select the trap target host you want to delete and click Delete. The system asks you whether to delete the trap target host.
    3. Click OK.
  • Update trap target host information.
    1. Choose Maintenance > System Maintenance > SNMP and click the Trap Setting tab, as shown in Figure 7-48.
    2. In the Destination host receiving traps area, click Refresh.