[Contents] [Prev] [Next] [Index] [Report an Error]

# Configuring SNMP Secure Packet Mirroring Traps

To configure SNMP secure traps support, perform the following tasks on your E-series router:

1. Enable packet mirroring support.
2. Configure the packet mirroring application to generate traps.
3. (Optional) Verify the packet mirroring trap configuration.
4. (Optional) Configure the SNMP server to support secure logs.
5. Configure the SNMP server to generate packet mirroring traps.
6. Configure the SNMPv3 user for whom packet mirroring traps are generated.
7. Configure the SNMP server to report packet mirroring traps to a remote host.
8. (Optional) Verify the SNMP server packet mirroring configuration.

The following example illustrates the procedure to configure SNMP secure packet mirroring traps support:

`

host1#mirror-enable
host1#configure terminal
host1(config)#mirror trap-enable
host1(config)#show mirror trap
Traps are enabled
host1(config)#snmp-server secure-log
host1(config)#snmp-server user fredMirrorUser group mirror authentication md5 fred-md5password privacy des fred-despassword
host1(config)#snmp-server enable traps packetMirror trapFilters notice
host1(config)#snmp-server host 192.168.57.103 version 3 fredMirrorUser cliSecurityAlert packetMirror trapFilters notice
host1(config)#show snmp trap

`

    Enabled Categories: CliSecurity, PacketMirror, Sonet
    SNMP authentication failure trap is disabled
    Trap Source: FastEthernet 6/0, Trap Source Address:192.168.120.78
    Trap Proxy: enabled
    Global Trap Severity Level: 6 - informational
    Address          Security String                   Ver  Port   Trap Categories
    ---------------  --------------------------------  ---  -----  ----------------
    192.168.1.1      host1                             v1   162    Cli
    192.168.57.103   fredMirrorUser                    v3   162    CliPacketMirror
    192.168.57.162   host2                             v3   162    Sonet
    Address         TrapSeverityFilter  Ping    Maximum    Queue    Queue Full
                                       TimeOut QueueSize DrainRate discrd methd
    --------------- ------------------ ------- --------- --------- -------------
    192.168.1.1     5 - notice         1       32        0         dropLastIn
    192.168.57.103  5 - notice         1       32        0         dropLastIn
    192.168.57.162  2 - critical       1       32        0         dropLastIn

#### Related Topics

- Using SNMP Secure Packet Mirroring Traps
- See Configuring SNMP in JUNOSe System Basics Configuration Guide for information about JUNOSe software SNMP support.
- mirror trap-enable
- snmp-server clear secure-log
- snmp-server enable traps
- snmp-server host
- snmp-server secure-log
- show mirror trap
- show snmp secure-log

[Contents] [Prev] [Next] [Index] [Report an Error]