1 - 2 IT Essentials II v2.0 - Lab 11.5.10
Copyright
2002, Cisco Systems, Inc.
Lab 11.5.10: Configuring SNMP Security and Traps
Estimated Time: 20 minutes
Objective
Upon completion of this lab, students will be able to configure SNMP monitoring agents
to run tests and alerts for their systems.
Equipment
•
A PC with Windows 2000 Professional installed.
•
A PC with SNMP installed.
Scenario
The network needs to be monitored more closely. SNMP must be set up with security
and traps.
Procedures
Configure the security and traps features used by SNMP:
Step 1
Click Start > Programs > Administrative Tools > Computer Management. In the
console tree, open Services and Applications and click Services.
Step 2
In the details pane, right-click SNMP Service and click Properties.
Step 3
Click the Security tab. Put a checkmark in the box next to Send authentication trap.
This will display a trap message when the authentication fails.
Step 4
Click Add under Accepted community names. A SNMP Service Configuration box will
open. Under Community rights, highlight READ ONLY, right-click and then select
What’s This. Write the different definitions below.
None -
____________________________________________________________
Notify -
____________________________________________________________
Read Only -
________________________________________________________
Read Write -
________________________________________________________
Read Create -
_______________________________________________________
2 - 2 IT Essentials II v2.0 - Lab 11.5.10
Copyright
2002, Cisco Systems, Inc.
Next, make the Community Name public, then click Add.
Step 5
In the lower part of the security tab window select Accept SNMP packet from any host.
Click Apply, and then OK.
What is the purpose of a community name?
__________________________________________________________________
Step 6
From the SNMP Service Properties window, click on the Traps tab. Under Community
name, type public1 in the drop down list. Click Add to list. Public will appear in the box
by default.
Step 7
Under Trap destinations click Add and type the Host name, the name of your PC, in the
box. Click Apply, and then OK. Close all windows.
Troubleshooting
Before configuring SNMP on a network, document the layout of the network depicting
SNMP communities. When setting the community name, do not use the default name of
“PUBLIC”. Using this default name poses a security risk. If access is gained to the
device, intruders can obtain device information and possibly change the configurations.
Reflection
What is the default SNMP community name?
__________________________________________________________________