Cisco 7604 Configuration Manual page 599

Chapter 25 Monitoring the Firewall Services Module
hostname(config)# snmp-server host interface_name ip_address [trap | poll]
[community text] [version {1 | 2c}] [udp-port port]
Where the interface_name argument specifies the interface through which you access the NMS.
The ip_address argument specifies the IP address of the NMS.
Specify trap or poll if you want to limit the NMS to receiving traps only or browsing (polling) only. By
default, the NMS can use both functions.
To change the port number, use the udp-port keyword.
To specify the community string, enter the following command:
Step 3
hostname(config)# snmp-server community key
The SNMP community string is a shared secret between the FWSM and the NMS. The key is a
case-sensitive value up to 32 characters in length. Spaces are not permitted.
(Optional) To set the SNMP server location or contact information, enter the following command:
Step 4
hostname(config)# snmp-server {contact | location} text
Where text defines the SNMP server location or contact information.
To enable the FWSM to send traps to the NMS, enter the following command:
Step 5
hostname(config)# snmp-server enable traps [all | syslog | snmp [trap] [...] |
cpu threshold [trap] | entity [trap] [...] | ipsec [trap] [...] | nat [trap] |
remote-access [trap] | resource [trap]]
Enter this command for each feature type to enable individual traps or sets of traps, or enter the all
keyword to enable all traps.
The default configuration has all SNMP traps enabled (snmp-server enable traps snmp authentication
linkup linkdown coldstart). You can disable these traps using the no form of this command with the
snmp keyword. However, the clear configure snmp-server command restores the default enabling of
SNMP traps.
If you enter this command and do not specify a trap type, then the default is syslog. (The default snmp
traps continue to be enabled along with the syslog trap.)
Traps for snmp include:
authentication
•
linkup
•
linkdown
•
coldstart
•
Traps for entity include:
• config-change
• fru-insert
fru-remove
•
redun-switchover
•
alarm-asserted
•
alarm-cleared
•
Traps for ipsec include:
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Configuring SNMP
25-33