Got it
Huawei Enterprise Support Community
Community Forums Routing & Switching
SNMP Monitoring through M...

SNMP Monitoring through MEth Port

Created: May 20, 2021 14:07:39Latest reply: May 20, 2021 16:44:34 322 8 1 0 0
  Rewarded HiCoins： 0 (problem resolved)
View the author 1#

Hello

I'm curious if a Huawei Switch can be monitored by SNMP through Management Ethernet Port (MEth).

To prevent Inter-VLAN routing and avoid ACL configuration on Switch for using a regular port to manage Switch, I want to use the MEth Port (out-of-bounds) to monitor the Switch.


Can I easily add snmp-agent target-host trap addess of a destination connected to my MEth port?


And how can I monitor Switch from 2 different Hosts?

E.g. 1 Host is connected at MEth Port and requests SNMP information, 2nd Host is connected to a Inbound Port and also requests SNMP information? Is it possible to add 2 snmp-agent target-host trap addresses?



****************************************************************************

snmp-agent

snmp-agent community read XXXXXXX

snmp-agent sys-info contact YYYYYYY

snmp-agent sys-info location ZZZZZZZ

snmp-agent sys-info version v2c

undo snmp-agent sys-info version v1

undo snmp-agent sys-info version v3

snmp-agent target-host trap address udp-domain 'ip address' params securityname XXXXXXXXX v2c

snmp-agent trap source Vlanif 'VLAN number'

undo snmp-agent trap enable

y

snmp-agent trap enable 

****************************************************************************



Appreciate any help!

Christian

snmpManagement IP

Like (1) Dislike (0) Favorite(0) Share Report
Previous: Understanding of MSTP - Background
Next: NE-40E bRAS, How to set timeout setting for PPP users
Featured Answers

Best answer

(2) (0)
andersoncf1
MVE Author Created May 20, 2021 16:44:34

Hi @chr_WEYTEC,

It is possible to configure traps via Meth.

Below is a real example of trap configuration via Meth:

#
snmp-agent

snmp-agent sys-info version v3
snmp-agent group v3 snmpv3usergroup privacy write-view View_ALL notify-view View_ALL
snmp-agent target-host trap address udp-domain 192.168.100.90 source MEth0/0/1 params securityname snmpv3user v3 privacy
snmp-agent mib-view included View_ALL iso
snmp-agent usm-user v3 snmpv3user
snmp-agent usm-user v3 snmpv3user group snmpv3usergroup
snmp-agent usm-user v3 snmpv3user authentication-mode sha cipher ******
snmp-agent usm-user v3 snmpv3user privacy-mode aes128 cipher ******
snmp-agent trap source MEth0/0/1
snmp-agent trap enable

I take advantage and leave a post that I made of a practical configuration:

https://forum.huawei.com/enterprise/en/configuring-snmpv3-protocol-and-template-on-switch-and-esight/thread/687757-871

Any questions can contact SNMP Monitoring through MEth Port-3937431-1
View more
  • x
  • convention：

chr_WEYTEC
chr_WEYTEC Created May 21, 2021 20:41:32 (0) (0)
Nice one, very grateful for that precious answer!
I guess it doesnt matter if v2 or v3 is in use?

1.
The extension "source MEth0/0/1" defines traps to be sent over MEth port:
snmp-agent target-host trap address udp-domain x.x.x.x source MEth0/0/1 params securityname

2.
snmp-agent trap source MEth0/0/1

---
Am I correct that when sending traps to 2 destinations (1st inband, 2nd MEth port) I can enter both commands from above multiple times? What does 2nd command define?  
IndianKid
IndianKid Created May 23, 2021 07:29:11 (0) (0)
Great answer. Thanks for this.  

Recommended answer

(1) (0)
chenhui
Admin Created May 20, 2021 14:25:43

Hello chr_WEYTEC,
Yes, you can add multi snmp-agent target-host trap addresses. To configure multiple target hosts, you must run the snmp-agent target-host trap command on each target host.
In other words, you can add multi target hosts through applying multi times of the command 'snmp-agent target-host trap'.
For more detailes, you can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100064949&id=snmp-agent_target-host_trap&lang=en
View more
  • x
  • convention：

chr_WEYTEC
chr_WEYTEC Created May 20, 2021 14:49:59 (0) (0)
Hello chenhui
Thank you very much for clearifying this question. Can you also answer if it is possible to monitor switch by SNMP through MEth Port?  
chenhui
chenhui Reply chr_WEYTEC  Created May 20, 2021 15:52:33 (1) (0)
Yes, but the MEth cannot configure the routes, so, the PC should be in the same network segment with the MEth port.  
chr_WEYTEC
chr_WEYTEC Reply chenhui  Created May 21, 2021 21:13:41 (0) (0)
Thanks, i was wondering if monitoring host in another range can be reached through MEth port. Very useful answer and good to know that MEth can not be used for routes in other networks. Thanks  
All Answers
(0) (0)
2#
BetterMing
BetterMing Created May 20, 2021 14:08:18

Hello, dear.
It's nice to meet you in the community.
We're working on getting the right answer for you. Please rest assured that we'll be back with an answer shortly.
View more
  • x
  • convention：
(1) (0)
3#
chenhui
chenhui Admin Created May 20, 2021 14:25:43

Hello chr_WEYTEC,
Yes, you can add multi snmp-agent target-host trap addresses. To configure multiple target hosts, you must run the snmp-agent target-host trap command on each target host.
In other words, you can add multi target hosts through applying multi times of the command 'snmp-agent target-host trap'.
For more detailes, you can refer to https://support.huawei.com/hedex/hdx.do?docid=EDOC1100064949&id=snmp-agent_target-host_trap&lang=en
View more
  • x
  • convention：

chr_WEYTEC
chr_WEYTEC Created May 20, 2021 14:49:59 (0) (0)
Hello chenhui
Thank you very much for clearifying this question. Can you also answer if it is possible to monitor switch by SNMP through MEth Port?  
chenhui
chenhui Reply chr_WEYTEC  Created May 20, 2021 15:52:33 (1) (0)
Yes, but the MEth cannot configure the routes, so, the PC should be in the same network segment with the MEth port.  
chr_WEYTEC
chr_WEYTEC Reply chenhui  Created May 21, 2021 21:13:41 (0) (0)
Thanks, i was wondering if monitoring host in another range can be reached through MEth port. Very useful answer and good to know that MEth can not be used for routes in other networks. Thanks  
(2) (0)
4#
andersoncf1
andersoncf1 MVE Author Created May 20, 2021 16:44:34

Hi @chr_WEYTEC,

It is possible to configure traps via Meth.

Below is a real example of trap configuration via Meth:

#
snmp-agent

snmp-agent sys-info version v3
snmp-agent group v3 snmpv3usergroup privacy write-view View_ALL notify-view View_ALL
snmp-agent target-host trap address udp-domain 192.168.100.90 source MEth0/0/1 params securityname snmpv3user v3 privacy
snmp-agent mib-view included View_ALL iso
snmp-agent usm-user v3 snmpv3user
snmp-agent usm-user v3 snmpv3user group snmpv3usergroup
snmp-agent usm-user v3 snmpv3user authentication-mode sha cipher ******
snmp-agent usm-user v3 snmpv3user privacy-mode aes128 cipher ******
snmp-agent trap source MEth0/0/1
snmp-agent trap enable

I take advantage and leave a post that I made of a practical configuration:

https://forum.huawei.com/enterprise/en/configuring-snmpv3-protocol-and-template-on-switch-and-esight/thread/687757-871

Any questions can contact SNMP Monitoring through MEth Port-3937431-1
View more
  • x
  • convention：

chr_WEYTEC
chr_WEYTEC Created May 21, 2021 20:41:32 (0) (0)
Nice one, very grateful for that precious answer!
I guess it doesnt matter if v2 or v3 is in use?

1.
The extension "source MEth0/0/1" defines traps to be sent over MEth port:
snmp-agent target-host trap address udp-domain x.x.x.x source MEth0/0/1 params securityname

2.
snmp-agent trap source MEth0/0/1

---
Am I correct that when sending traps to 2 destinations (1st inband, 2nd MEth port) I can enter both commands from above multiple times? What does 2nd command define?  
IndianKid
IndianKid Created May 23, 2021 07:29:11 (0) (0)
Great answer. Thanks for this.  
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.