OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Working with SNMP Traps
Using SNMP
Working with SNMP Traps
The SNMP agent in the switch has the ability to send traps to the management station. It is not required
that the management station request them. Traps are messages alerting the SNMP manager to a condition
on the network. A trap message is sent via a PDU issued from the switch’s network management agent. It
is sent to alert the management station to some event or condition on the switch.
Traps can indicate improper user authentication, restarts, the loss of a connection, or other significant
events. You can configure the switch so that traps are forwarded to or suppressed from transmission to the
management station under different circumstances.
Trap Filtering
You can filter SNMP traps in at least two ways. You can filter traps by limiting user access to trap families
or you can filter according to individual traps.
Filtering by Trap Families
Access to SNMP traps can be restricted by withholding access privileges for user accounts to certain
command families or domains. (Designation of particular command families for user access is sometimes
referred to as partition management.)
SNMP traps are divided into functional families as shown in the “Using SNMP For Switch Security” on
page 9-9. These families correspond to switch CLI command families. When read-only privileges for a
user account are restricted for a command family, that user account is also restricted from reading traps
associated with that family.
Procedures for filtering traps according to command families can be found in the Quick Steps for “Filtering
by Trap Families” on page 9-4. For a list of trap names, command families, and their descriptions refer
to the “Using SNMP For Switch Security” on page 9-9.
Filtering By Individual Trap
You can configure the switch to filter out individual traps by using the snmp-trap filter-ip command.
This command allows you to suppress specified traps from the management station. The following information
is needed to suppress specific traps:
• The IP address of the SNMP management station that will receive the traps.
• The ID number of the individual traps to be suppressed.
Procedures for filtering individual traps can be found in the Quick Steps for “Filtering by Individual
Traps” on page 9-5. For a list of trap names, ID numbers, and their descriptions refer to the table “Using
SNMP For Switch Security” on page 9-9.
page 9-12 OmniSwitch AOS Release 8 Switch Management Guide May 2014