HP 5500 Ei 5500 Si Switch Series Configuration Guide

 50 
Displaying and maintaining information center 
 
Task Command Remarks 
Display the information about 
information channels. display channel [ channel
-number  | 
channel- name ] [  | { begin  | exclude | include  } 
regular-expression  ]  Available in any view 
Display the information about each 
output destination.  display info-center [ |
 { begin | exclude  | 
include  } regular-expression ]  Available in any view 
Display the state of the log buffer 
and the log information recorded. display...

 51 
[Sysname] info-center source default channel loghost debug state off log\
 state off 
trap state off 
To avoid outputting unnecessary information, disable the output of log, trap, and debugging 
information on the specified channel ( loghost in this example) before you configure an output rule. 
# Configure an output rule to outp ut to the log host ARP and IP log information that has a severity 
level of at least informational . (The source modules that are allowed to output information depend 
on...

 52 
Figure 19 Network diagram 
 
 
Configuration procedure 
Before the configuration, make sure that the device and the PC can reach each other. 
1. Configure the device: 
# Enable the information center. 
 system-view 
[Sysname] info-center enable 
# Specify the host 1.2.0.1/16 as the log host. Use the channel  loghost to output log information 
(optional,  loghost by default), and use  local5 as the logging facility. 
[Sysname] info-center loghost 1.2.0.1 channel loghost facility local5 
# Disable the...

 53 
d.
 
Display the process ID of syslogd , kill the syslogd process, and restart  syslogd using the  -r 
option to make the modified  configuration take effect. 
# ps -ae | grep syslogd 
147 
# kill -9 147 
# syslogd -r & 
Make sure that the syslogd process is started with the -r option on the Linux log host. 
Now, the system can record log information into the log file. 
Outputting log information to the console  
Network requirements 
Configure the device to send ARP and IP log informatio n that has...

 54 
Now, if the ARP and IP modules generate log information, the information center automatically sends the 
log information to the console. 
Saving security logs into the security log file 
Network requirements 
•   Save security logs into the security log file  Flash:/securitylog/seclog.log every one hour. 
•   Only the security log administrator can view the contents of the security log file. No other users 
cannot view, copy, or rename the security log file. 
Figure 21  Network diagram...

 55 
[Sysname] info-center security-logfile enable 
[Sysname] info-center security-logfile frequency 3600 
# Create a local user seclog, and configure the password for the user as  123123123123. 
[Sysname] local-user seclog 
New local user added. 
[Sysname-luser-seclog] password simple 123123123123 
# Authorize the user to mana ge the security log file. 
[Sysname-luser-seclog] authorization-attribute level 3 user-role securit\
y-audit 
# Authorize the user to use SSH, Telnet, and terminal services....

 56 
 mkdir securitylog 
. 
%Created dir flash:/securitylog. 
 info-center security-logfile switch-directory flash:/securityl\
og/ 
# Display the contents of the security log file buffer. 
 display security-logfile buffer 
%@175 Nov  2 17:02:53:766 2011 Sysname SHELL/4/LOGOUT: 
 Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.2: logout from Console 
%@176 Nov  2 17:02:53:766 2011 Sysname SHELL/5/SHELL_LOGOUT:Console logg\
ed out from 
aux0. 
The content of other logs is not shown. 
The preceding information indicates...

 57 
Configuring SNMP 
T h i s  c h a p t e r  p r o vi d e s  a n  o v e r v i e w  o f  t h e  S i m p l e  N e t w o r k  M a n a g e m e n t  P r o t o c o l  ( S N M P )  a n d  g u i d e s  yo u  
through the configuration procedure. 
Overview 
SNMP is an Internet standard protocol widely used for a management station to access and operate the 
devices on a network, regardless of their vendors, ph ysical characteristics and interconnect technologies. 
SNMP enables network administrators to read and...

 58 
A MIB view represents a set of MIB objects (or MIB object hierarchies) with certain access privilege and 
is identified by a view name. The MIB objects included in the MIB view are accessible while those 
excluded from the MIB view are inaccessible.  
A MIB view can have multiple view records each identified by a  view-name oid-tree pair. 
You control access to the MIB by assigning MIB views to SNMP groups or communities. 
SNMP operations 
SNMP provides the following basic operations: 
•   Get—The...

 59 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enable the SNMP agent. 
snmp-agent  Optional. 
By default, the SNMP agent is 
disabled. 
You can also enable the SNMP 
agent by using any command that 
begins with snmp-agent except the 
snmp-agent calculate-password
 
and  snmp-agent ifmib long-ifindex 
enable  commands. 
3.  Configure system information 
for the SNMP agent.  snmp-agent sys-info
 { contact 
sys-contact |  location sys-location  
|  version  { all  | {  v1  | v2c  |...