ACL ipv6 SNMP Ne20

Hello,

Please find below how to configure IPv6 ACL for SNMPv2c

Procedure

1. Run system-view

   
   

   The system view is displayed.

   
   

2. Run snmp-agent password min-length min-length

   
   

   The minimum SNMP password length is configured.

   
   

   
   

   After this command is run, the length of a configured SNMP password must be longer than or equal to the minimum SNMP password length.

   
   

3. Configure SNMP proxy, as shown in Table 1. The configuration tasks listed in Table 1 do not need to be performed in sequence.

   
   

   

• Increase the priority of notifications to ensure that the NMS receives them.

• Increase the priority of GetResponse and SetResponse PDUs to facilitate management operations performed in the management information base (MIB) of a managed device by the NMS.

• Reduce the priority of GetResponse PDUs, SetResponse PDUs, and notifications to prevent frequent packet sending when network congestion occurs.

• The target host may be either the NMS or the managed device.

• You can run this command multiple times with different parameters set to configure a middle-point device to send SNMP proxy packets to multiple NMSs.

• The default number of the destination User Datagram Protocol (UDP) port is 162, a well-known port number. If you want to change this number to a non-well-known port number, ensure that the new UDP port number is the same as that on the NMS.

• If you specify neither authentication nor privacy, SNMPv3 packets are neither authenticated nor encrypted.

• If the NMS and managed device need to communicate over a virtual private network (VPN), use the vpn-instance vpn-instance-name parameter.

• For an IPv4 network: snmp-agent proxy target-host target-host-name address udp-domain ip-address udp-port port-number [ source interface-type interface-number | { vpn-instance vpn-instance-name | public-net } | timeout timeout-interval ]^* params securityname { security-name { v1 | v2c | v3 [ authentication | privacy ] } | cipher cipher-text { v1 | v2c } }

• For an IPv6 network: snmp-agent proxy target-host target-host-name ipv6 address udp-domain ipv6-address udp-port port-number [ timeout timeout-interval ] params securityname { security-name { v1 | v2c | v3 [ authentication | privacy ] } | cipher cipher-text { v1 | v2c } }

• For GetRequest protocol data units (PDUs), SetRequest PDUs, and traps: snmp-agent proxy rule rule-name { read | trap | write } remote-engineid remote-engineid target-host target-host-name params-in securityname { security-name { v1 | v2c | v3 [ authentication | privacy ] } | cipher cipher-text { v1 | v2c } }

• For informs: snmp-agent proxy rule rule-name inform remote-engineid remote-engineid target-host target-host-name params-in securityname { security-name { v2c | v3 [ authentication | privacy ] } | cipher cipher-text v2c }

Run commit

The configuration is committed.

For more details refer to the link belowhttps://support.huawei.com/hedex/hdx.do?lib=EDOC1100075578AEI0514L&docid=EDOC1100075578&lang=en&v=02&tocLib=EDOC1100075578AEI0514L&tocV=02&id=dc_vrp_snmp_cfg_0028&tocURL=resources/software/nev8r10_vrpv8r16/user/vrp/dc_vrp_snmp_cfg_0028.html&p=t&fe=1&ui=3&keyword=IPv6+ACL+++SNMPv2cThanks