
Configuring source address checking SNMP
1-101
iMG/RG Software Reference Manual (System Configuration)
So the snmpNotifyFilterMask entry would be
ff:bf
With this value for snmpNotifyFilterMask and all other appropriate entries in the con figuration file, a
notification containing values from any of the following ifTable objects would match the filter and would not
be sent:
ifIndex.2
ifDescr.2
ifType.2
ifMtu.2
ifSpeed.2
ifPhysAddress.2
ifAdminStatus.2
ifOperStatus.2
ifLastChange.2
ifInUcastPkts.2
ifInErrors.2
ifOutUcastPkts.2
ifOutErrors.2
ifOutQLen.2
ifSpecific.2
1.6.4.2 Associating a filter with a notification parameter
To create a notification filter, add one or more snmpNotifyFilterProfileEntry definition in the
snmpd.cnf file accordingly the following syntax:
snmpNotifyFilterProfileEntry <snmpTargetParamsName> <snmpNotifyFil-
terProfileName> <snmpNotifyFilterProfileStorageType>
snmpTargetParamsName
is a snmpTargetParamsName defined in the snmpTargetParamsTable
snmpNotifyFilterProfileName
is a snmpNotifyFilterProfileName defined in the snmpNotifyFilterTable
snmpNotifyFilterProfileStorageType
is nonVolatile, permanent, or readOnly.
1.6.5 Configuring source address checking
A feature of SNMP Research software allows the SNMP engine to perform additional authentication of an
incoming SNMPv1, SNMPv2c, or SNMPv3 message by checking the source address of the message.
Komentarze do niniejszej Instrukcji