Network Device Management Flashcards
A message is generated when something happens on the device, such as an interface going down or an OSPF neighbor adjacency coming up
Syslog
What is the Syslog format?
- Sequence Number
- Time Stamp
- Facility
- Severity Level
- Mnemonic
- Description
What is Syslog Severely Level 0?
Emergency
What is Syslog Severely Level 1?
Alert
What is Syslog Severely Level 2?
Critical
What is Syslog Severely Level 3?
Error
What is Syslog Severely Level 4?
Warning
What is Syslog Severely Level 5?
Notice
What is Syslog Severely Level 6?
Informational
What is Syslog Severely Level 7?
Debug
Description of Syslog Severity:
System is unusable. A panic condition
Emergency
Description of Syslog Severity:
A condition that should be corrected immediately, such as a corrupted system database.
Alert
Description of Syslog Severity:
Critical conditions, such as hard device errors
Critical
Description of Syslog Severity:
Error Conditions
Error
Description of Syslog Severity:
Warning Conditions
Warning
Description of Syslog Severity:
Normal but significant conditions. Not errors, but may require special handling
Notice
Description of Syslog Severity:
Informational messages
Informational
Description of Syslog Severity:
Messages that contain information normally of use only when debugging a program
Debug
What locations can Syslog be logged to?
Console, VTY, Logging Buffer (RAM) and External Logging Servers
What command would you use while in an SSH session to view debug output to the CLI?
terminal monitor
What will appear in the syslog format if a sequence number isn’t provided?
*
What does facility mean in relation to a syslog event?
It’s the thing that generated the event
What does Mnemonic mean in relation to a syslog event?
Short description of what happened
What command would you use to log events to VTY lines?
logging monitor
What command would you use to disable console logging?
no logging console
What command would you use to enable or change events being logged to the buffer (RAM)?
logging buffer
Data variables (such as the state of an interface or the state of OSPF, etc.) on SNMP managed systems are organized in a what?
MIB (Management Information Base)
What are the three different versions of SNMP?
SNMPv1
SNMPv2c
SNMPv3
This version of SNMP uses plain text authentication between the Manager (server) and agent using matching community strings which act like a password
SNMPv1
This version of SNMP also uses plain text Community strings. It also supports bulk retrieval.
SNMPv2c
This version of SNMP supports strong authentication and encryption. It is the preferred version but it’s not support on all devices
SNMPv3
_____________________ need to be set on both sides for the Manager and Agent to communicate
Matching community strings
The ______________ is used by the Manager (server) to read information
Read only community (ro)
The _____________ is used by the Manager (server) to set information
Read write community (rw)
Give an example of an SNMPv2c configuration
- R1(config)#snmp-server contact {email-addresss}
- R1(config)#snmp-server location {location}
- This is optional. identifies the agent to the manager (server)
- R1(config)#snmp-server community {password} ro
- R1(config)#snmp-server community {password} rw
- R1(config)#snmp-server host {ip-address} {ro-community-string}
- R1(config)#snmp-server enable traps config
- When a configuration change is made a trap will be sent to the NMS system at 10.0.0.100 using the ro community string
Most devices use a default ro community string of _______ and a default rw community string of __________
public and private
3 different security levels are available with SNMPv3 - What are they?
NoAuthNoPriv
AuthNoPriv
AuthPriv
What security level is this in regards to SNMPv3?
No authentication password is exchanged and the communications between the agent the server are not encrypted. The username servers as replacement for community string. Really makes no sense to use this because it has no advantage over old SNMP versions
NoAuthNoPriv
What security level is this in regards to SNMPv3?
Password authentication is used. No encryption is used for communications between the devices
AuthNoPriv
What security level is this in regards to SNMPv3?
Password authentication is used. Communications between the agent and the server are also encrypted
AuthPriv
Give an example of a generic SNMPv3 configuration
Group Configuration
- R1(config)#snmp-server group {group-name} v3 priv
- This group only has full read only access to the device since it’s a default config with no views configured
User Configuration
- R1(config)#snmp-server user {username} {group-name} v3 auth sha {auth-password} priv aes 128 {priv-key}
- You can also used md5 if you choose to
- After you run this you’d go on to your NMS server and configure matching settings there
