Cisco Cisco Web Security Appliance S690 Guida Utente
17-11
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
Chapter 17 Generate Reports to Monitor End-user Activity
SNMP Monitoring
Hardware Traps
Status change traps are sent when the status changes. Fan Failure and high temperature traps are sent
every 5 seconds. The other traps are failure condition alarm traps - they are sent once when the state
changes (healthy to failure). Temperatures within 10 per cent of the critical value may be a cause for
concern.
every 5 seconds. The other traps are failure condition alarm traps - they are sent once when the state
changes (healthy to failure). Temperatures within 10 per cent of the critical value may be a cause for
concern.
Note
Failure condition alarm traps represent a critical failure of the individual component, but may not cause
a total system failure.
a total system failure.
SNMP Traps
SNMP provides the ability to send traps, or notifications, to advise an administration application when
one or more conditions have been met. Traps are network packets that contain data relating to a
component of the system sending the trap. Traps are generated when a condition has been met on the
SNMP agent (in this case, the Cisco Web Security Appliance appliance). After the condition has been
met, the SNMP agent then forms an SNMP packet and sends it over port 162, the standard SNMP trap
port. In the example below, the trap target of
one or more conditions have been met. Traps are network packets that contain data relating to a
component of the system sending the trap. Traps are generated when a condition has been met on the
SNMP agent (in this case, the Cisco Web Security Appliance appliance). After the condition has been
met, the SNMP agent then forms an SNMP packet and sends it over port 162, the standard SNMP trap
port. In the example below, the trap target of
10.1.1.29
and the Trap Community string are entered. This
is the host running the SNMP management console software that will receive the SNMP traps from the
appliance.
appliance.
You can configure SNMP traps (enable or disable specific traps) when you enable SNMP for an
interface. To specify multiple trap targets: when prompted for the trap target, you may enter up to 10
comma separated IP addresses.
interface. To specify multiple trap targets: when prompted for the trap target, you may enter up to 10
comma separated IP addresses.
CLI Example
In this example, the
snmpconfig
command is used to enable SNMP on the “PublicNet” interface on port
161. A passphrase for version 3 is entered and then re-entered for confirmation. The system is configured
to service version 1 and 2 requests, and the community string
to service version 1 and 2 requests, and the community string
public
is entered for GET requests from
those versions 1 and 2. The trap target of
10.1.1.29
is entered. Finally, system location and contact
information is entered.
Model
High Temp
(Ambient)
(Ambient)
Fan Failure
Power Supply
RAID
Link
S160/S350/S360/S650
/S660
/S660
47C
0 RPMs
Status Change
Status Change
Status Change
example.com> snmpconfig
Current SNMP settings:
SNMP Disabled.