CCIE Pursuit Blog

August 10, 2008

Internetwork Expert Volume II: Lab 5 – Section 9

Section 9 – System Management – 6 Points

9.1 SNMP

This is a basic SNMP task.  You’ll see variations of this same task in nearly all of the IE Volume II labs.  The only possible “gotcha” requirements are:

“This (192.10.1.10) is the only station that should be allowed to manage r6.”
“Attempts by other devices to manage r6 via snmp should be logged.”

Our ACL should look like this:

r6(config)#access-list 91 perm 192.10.1.101
r6(config)#access-list 91 deny any log

You need to add the explicit deny any statement in order to log traffic from sources other that the management station in the permit statement.

r6(config)#snmp-server community CISCORO ro 91
r6(config)#snmp-server community CISCORW rw 91

9.2 Syslog

This was an easy task as well.  The only slightly odd bit:

“r4 and r5 should include their hostname in the syslog messages.”

You can find this (as well as the commands for the other requirements) by just issuing “logg ?” in configuration mode:

r4(config)#logg ?
  origin-id            Add origin ID to syslog messages

logging origin-id

r4(config)#logg origin-id ?
  hostname  Use origin hostname as ID
  ip        Use origin IP address as ID
  string    Define a unique text string as ID

r4(config)#logg origin-id hostname

Advertisements

Leave a Comment »

No comments yet.

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Create a free website or blog at WordPress.com.

%d bloggers like this: