Configuring Snmp Traps - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Configuring SNMP Traps

Configuring SNMP Traps
Configure the SNMP traps in the service notification submode.
The following options apply:
•
•
•
•
•
To configure SNMP traps, follow these steps:
Log in to the CLI using an account with administrator privileges.
Step 1
Enter notification submode:
Step 2
sensor# configure terminal
sensor(config)# service notification
Enable SNMP traps:
Step 3
sensor(config-not)# enable-notifications true
Set the parameters for the SNMP trap:
Step 4
a.
b.
c.
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
11-4
enable-detail-traps [true | false]—Enables the sending of detailed traps with no size limit.
Otherwise traps are sent in sparse mode (less than 484 bytes).
enable-notifications [true | false]—Enables event notifications.
error-filter [warning | error | fatal]—Determines which errors generate an SNMP trap. An SNMP
trap is generated for every evError event that matches the filter. The default is error and fatal.
trap-community-name—The community name used when sending traps if no name is specified
when defining the trap destinations.
trap-destinations—Defines the destinations to send error events and alert events generated from
signature actions.
– trap-community-name—The community name used when sending the trap. If no community
name is specified the general trap community name is used.
– trap-port—The port number to send the SNMP trap to.
Select the error events you want to be notified about through SNMP traps:
sensor(config-not)# error-filter [error | warning | fatal]
The error-filter [error | warning | fatal] command includes error, warning, and fatal traps.
Note
It filters in (not filters out) the traps based on severity.
Choose whether you want detailed SNMP traps:
sensor(config-not)# enable-detail-traps true
Type the community string to be included in the detailed traps:
sensor(config-not)# trap-community-name TRAP1
Chapter 11 Configuring SNMP
78-16527-01