26 - Network Management Flashcards
Can an SNMP agent initiate communications with an SNMP manager?
yes
What is the difference between a trap and an inform?
An inform has to be acknowledged by the SNMP manager or it will send it again. A trap does not.
Which community string is required for a ‘get’?
RO or RW
In SNMPv3 what kind of security protocols are supported for authentication?
Hash algorithms of SHA or MD5
Which ‘show’ command primarily lists counters and status info rather than configuration information?
show snmp
Can more than one source port be included in a single SPAN session?
yes
Can a SPAN source include a switchport and a VLAN?
No
What is the default state of SNMP on a new device?
SNMP is disabled
How do you enable SNMPv2c?
Once the first ‘snmp-server’ command is entered SNMP becomes enabled
How do you disable SNMPv2c?
no snmp-server
What is the command to enable RO SNMP along with an IPv6 ACL?
snmp-server community (string) ipv6 (acl_name)
What are the two commands needed to enable traps?
- snmp-server host 172.19.26.86 version 2c (community)
- snmp-server enable traps
What are the two commands needed to enable informs?
- snmp-server host 172.19.26.86 informs version 2c (community)
- snmp-server enable traps
What ‘show’ command repeats the community strings?
show snmp-server community
What ‘show’ command lists the IP or hostname of the NMS?
show snmp-server host
In SNMPv3 what does the command ‘snmp-server group’ do?
It contains the security settings for a group of users
In SNMPv3 what does the command ‘snmp-server user’ do?
creates an SNMP user and associates the user with the Group
In SNMPv3 what does the keyword ‘noauth’ do?
- checks message integrity
- no authentication
- no encryption
In SNMPv3 what does the keyword ‘auth’ do?
* checks message integrity * performs authentication * no encryption
In SNMPv3 what does the keyword ‘priv’ do?
* checks message integrity * performs authentication * performs encryption
In SNMPv3 what command creates a group that requires authentication, is read-only, and has an ACL of SNMP_ACL?
snmp-server group myROgroup v3 auth access SNMP_ACL
In SNMPv3 what command creates a group that requires authentication, encryption, is read-write and has an ACL of SNMP_ACL?
snmp-server group myRWgroup v3 priv write default1 access SNMP_ACL
In SNMPv3 what encryption algorithms are supported?
DES, 3DES, AES
In SNMPv3 what is the command to create a user who is a member of the myROgroup and uses MD5 password encryption?
snmp-server user myuser myROgroup v3 auth md5 AuthPassword
In SNMPv3 what is the command to create a user who is a member of the myRWgroup, uses SHA password hash and 3DES encryption?
snmp-server user myuser myRWgroup v3 auth sha AuthPassword priv 3des EncryptKey
What are 2 methods of Hash?
SHA and MD5
What are 3 methods of encryption?
DES, 3DES, AES
In SNMPv3 what are the 3 items in order to set up a read-only group with no authentication?
- snmp-server group MyGroupName
- v3
- noauth
In SNMPv3 what are the 3 items in order to set up a user for the read-only group with no authentication?
- snmp-server user MyUserName
- MyGroupName
- v3
In SNMPv3 what is the format of the command for creating a read-write group?
- snmp-server group MyGroupName
- v3
- noauth | auth | priv
- write default1
In SNMPv3 what is the format of the command for creating a user for the read-write group?
- snmp-server user MyUserName
- MyGroupName
- v3
- auth md5 | sha
- MyPassword
- priv des | 3des| aes
- myEncryptKey
In SNMPv3 how do you add an ACL to the SNMP agent?
add ‘access (myACL) to the end of the ‘snmp-server group’ statement
In SNMPv3 what two ‘show’ commands allow you to verify the SNMP config?
show snmp group’ and ‘show snmp user’
In SNMPv3 what is the command to enable traps?
- snmp-server enable traps
- snmp-server host 172.19.26.86 version 3 (auth | noauth | priv) myUserName
- Note: the noauth | auth | priv must match the setting in the group that myUserName is in
In SNMPv3 what is the command to verify the traps or informs configuration?
show snmp host
In SNMPv3 what is the command to enable informs?
- snmp-server enable traps
- snmp-server host 172.19.26.86 informs version 3 (auth | noauth | priv) myUserName
- NOTE: the noauth|auth|priv must match the setting in the group that myUserName is in
What 3 commands are the bare minimum for configuring an IP SLA ICMP probe?
- ip sla 1
- icmp-echo 10.1.2.3 source-ip 11.1.2.3
- ip sla schedule 1 life forever start-time now
What ‘show’ commands can be used with IP SLA?
- show ip sla summary
- show ip sla statistics 1
- show ip sla history
What is the command to reset IP SLA counters?
ip sla restart (op_number)
