Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

SNMP provides the ability to send traps, or notifications, to advise an administration application (an 
SNMP management console, typically) when one or more conditions have been met. Traps are network 
packets that contain data relating to a component of the system sending the trap. Traps are generated 
when a condition has been met on the SNMP agent (in this case, the Cisco IronPort appliance). After the 
condition has been met, the SNMP agent then forms an SNMP packet and sends it over port 162, the 
standard SNMP trap port. In the example below, the trap target of 

snmp-monitor.example.com

 and the 

Trap Community string are entered. This is the host running the SNMP management console software 
that will receive the SNMP traps from the Cisco IronPort appliance. 

You can configure SNMP traps (enable or disable specific traps) when you enable SNMP for an 
interface. To specify multiple trap targets: when prompted for the trap target, you may enter up to 10 
comma separated IP addresses.

In the following example, the 

snmpconfig

 command is used to enable SNMP on the “PublicNet” 

interface on port 161. A passphrase for version 3 is entered and then re-entered for confirmation. The 
system is configured to service version 1 and 2 requests, and the community string 

public

 is entered for 

GET requests from those versions 1 and 2. The trap target of 

snmp-monitor.example.com

 is entered. 

Finally, system location and contact information is entered.

mail3.example.com> snmpconfig

Current SNMP settings:

SNMP Disabled.

Choose the operation you want to perform:

- SETUP - Configure SNMP.

[]> setup

Do you want to enable SNMP? [N]> y

Please choose an IP interface for SNMP requests.

1. Data 1 (192.168.1.1/24: mail3.example.com)

2. Data 2 (192.168.2.1/24: mail3.example.com)

3. Management (192.168.44.44/24: mail3.example.com)

[1]>