Cisco Cisco Web Security Appliance S690 ユーザーガイド
22-38
AsyncOS 10.0 for Cisco Web Security Appliances User Guide
Chapter 22 Perform System Administration Tasks
Monitoring System Health and Status Using SNMP
To specify multiple trap targets: when prompted for the trap target, you may enter up to 10 comma
separated IP addresses.
separated IP addresses.
Related Topics
•
About the connectivityFailure SNMP Trap
The connectivityFailure trap is intended to monitor your appliance’s connection to the internet. It does
this by attempting to connect and send an HTTP GET request to a single external server every 5 to 7
seconds. By default, the monitored URL is
this by attempting to connect and send an HTTP GET request to a single external server every 5 to 7
seconds. By default, the monitored URL is
downloads.ironport.com
on port 80.
To change the monitored URL or port, run the
snmpconfig
command and enable the connecivityFailure
trap, even if it is already enabled. You will see a prompt to change the URL.
Tip
To simulate connectivityFailure traps, you can use the
dnsconfig
CLI command to enter a non-working
DNS server. Lookups for downloads.ironport.com will fail, and traps will be sent every 5-7 seconds. Be
sure to change the DNS server back to a working server after completing your test.
sure to change the DNS server back to a working server after completing your test.
CLI Example: snmpconfig
wsa.example.com> snmpconfig
Current SNMP settings:
SNMP Disabled.
Choose the operation you want to perform:
- SETUP - Configure SNMP.
[]> SETUP
Do you want to enable SNMP?
[Y]>
Please choose an IP interface for SNMP requests.
1. Management (198.51.100.1: wsa.example.com)
[1]>
Which port shall the SNMP daemon listen on interface "Management"?
[161]>
Please select SNMPv3 authentication type:
1. MD5
2. SHA
[1]> 2
Please select SNMPv3 privacy protocol:
1. DES
2. AES
[1]> 2
Enter the SNMPv3 authentication passphrase.
[]>
Please enter the SNMPv3 authentication passphrase again to confirm.
[]>
Enter the SNMPv3 privacy passphrase.
[]>