Configure MA5620 the IP
address of the inband NMS interface.
Create the NMS VLAN.
huawei(config)#vlan
10 standard
Add the upstream
port.
huawei(config)#port
vlan 10 0/19 0-1
It will take several minutes, and console may
be timeout, please use command
idle-timeout to set
time limit
Are you sure to add standard port(s)?
(y/n)[n]:y
Enter the NMS VLAN
interface mode.
huawei(config)#interface
vlanif 10
Configure the IP
address of the NMS interface.
huawei(config-if-vlanif10)#ip
address 10.10.1.2 255.255.255.0
Add the route.
Configure the route
destined to the NMS (Trap destination address).
huawei(config)#ip
route-static 2.2.2.2 255.255.255.255 10.10.1.1
preference 1
huawei(config)#ip
route-static 2.2.2.3 255.255.255.255 10.10.1.1
preference 1
Configure the route
destined to the time server.
huawei(config)#ip
route-static 4.4.4.4 255.255.255.255 10.10.1.1
preference 1
huawei(config)#ip
route-static 4.4.4.5 255.255.255.255 10.10.1.1
preference 1
Configure the route
destined to the log host.
huawei(config)#ip
route-static 3.3.3.3 255.255.255.255 10.10.1.1
preference 1
huawei(config)#ip
route-static 3.3.4.3 255.255.255.255 10.10.1.1
preference 1
Add the ACL rule.
huawei(config)#acl
3050
huawei(config-acl-adv-3050)#rule
permit ip source any destination any
huawei(config-acl-adv-3050)#rule
deny ip source any destination 10.10.1.2
0.0.0.0
huawei(config-acl-adv-3050)#rule
permit ip source 2.2.2.2 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule
permit ip source 2.2.2.3 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule
permit ip source 4.4.4.4 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule
permit ip source 4.4.4.5 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule
permit ip source 3.3.3.3 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#rule
permit ip source 3.3.4.3 0.0.0.0
destination 10.10.1.2 0.0.0.0
huawei(config-acl-adv-3050)#quit
huawei(config)#packet-filter
inbound ip-group 3050 port 0/19/0
huawei(config)#packet-filter
inbound ip-group 3050 port 0/19/1
Configure SNMP.
Set the community
name and access authority.
huawei(config)#snmp-agent
community read public
huawei(config)#snmp-agent
community write private
Set the SysContact.
huawei(config)#snmp-agent
sys-info contact HW-075512345678
Set the SysLocation.
huawei(config)#snmp-agent
sys-info location Shenzhen China
Set the SNMP
version.
The SNMP version
must be the same as that of the NMS. In this example, the SNMP version is set
as SNMP V2C.
huawei(config)#snmp-agent
sys-info version v2c
Enable the trap
sending.
huawei(config)#snmp-agent
trap enable standard
Set trap destination
address.
huawei(config)#snmp-agent
target-host trap-hostname huawei address 2.2.2.2
trap-paramsname
abc
huawei(config)#snmp-agent
target-host trap-hostname huawei123 address 2.2.2.3
trap-paramsname 123
Set trap source
address.
huawei(config MA5626 )#snmp-agent
trap source vlanif 10
没有评论:
发表评论