Discussion

3. IPSec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
3.1 Configuring IPSec 108
3.2 Configuring IPSec Dynamic SAs 111
3.3 Creating IPSec Dynamic SAs on J-Series Routers or
Routers with AS PICs 116
3.4 Using Digital Certificates to Create Dynamic IPSec SAs 121
4. SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
4.1 Configuring SNMP 133
4.2 Setting Router Information for the MIB-II System Group 135
4.3 Setting Up SNMP Traps 136
4.4 Controlling SNMP Access to the Router 137
4.5 Using a Firewall Filter to Protect SNMP Access 138
4.6 Controlling Access to Router MIBs 140
4.7 Extracting Software Inventory Information
with SNMP 141
4.8 Extracting Hardware Inventory Information
with SNMP 142
4.9 Collecting Router Operational Information
with SNMP 145
4.10 Logging SNMP Access to the Router 147
4.11 Logging Enterprise-Specific Traps 148
4.12 Using RMON Traps to Monitor the Router’s Temperature 149
4.13 Configuring SNMPv3 153
4.14 Tracking Router Configuration Changes 156
4.15 Setting Up SNMPv3 Traps 157
5. Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 162
5.1 Turning On Logging 164
5.2 Limiting the Messages Collected 167
5.3 Including the Facility and Severity in Messages 167
5.4 Changing the Size of a Logging File 168
5.5 Clearing the Router’s Logfiles 170
5.6 Sending Log Messages to Your Screen 171
5.7 Sending Logging Messages to a Log Server 172
5.8 Saving Logging Messages to the Other Routing Engine 175
5.9 Turning Off Logging 177
5.10 Turning On Basic Tracing 178
5.11 Monitoring Interface Traffic 179
Table of Contents | vii