Monitor SNMP Trap

[Nitesh Prabhakar]

i have configured the port securities on my switches..its working fine...but i want to monitor the SNMP trap ie the port violation count ....is there any tool or something which says me that on that switch someone has violated the port security

[SOcchiogrosso]

I would configure logging to a syslog server or a network monitoring server. That will give you a centralized view for these logs. Most syslog servers and/or network monitoring servers allow you create filters so you can easily view these particular events.

[Nitesh Prabhakar]

Socchi thanx for reply ...

that i know a syslog server has to be configured but filter option is dere or not i willl check ...i have already configured it ....but it generates all the log regarding that device ...i want only the port viaolation(restrict) logs

[Julio Carvajal · Accepted solution]

Hello,

When using Port Security on a Cisco Switch you have 3 options being the Restricted option and ofcourse the Shutdown option the ones that actually do both (Generate a SNMP trap and generates a log).

Note that each of these actions increment the SNMP violation counter.

You could then export syslogs messages related to this topic to a syslog server or even perform SNMP walks to obtain this info.

Manually just check for show port-security .   As this will show you the counters of violations

Makes sense?

Regards,

Jcarvaja

[Nitesh Prabhakar]

Thanx Jcarvaja

I have already configured it for restrict and able to see the show port-security...i want to monitor on real time basis...if someone violate ....it should show in the log screen