SNMP Trap/Syslog

[nojpt]

Hi,

Can anybody point me to a site where i could read a nice article about SNMP Traps and Syslog?

I am confused which to use. SNMP traps or syslog messages logged to a management station. I have a HPOV on solaris and im afraid i have incorrect configuration on my cisco devices. Or do i have to configure both snmp traps and set logging server to be able to get syslog messages to my management station ?

Thanks.

[Palani Mohan · Accepted solution]

A good place to start to know what is SNMP would be

http://www.cisco.com/univercd/cc/td/doc/cisintwk/ito_doc/snmp.htm

Traps and syslog messages are different means by which an agent tells the monitoring application something siginificant.

Both UDP for transport, but different port numbers trap udp/162 syslog udp/514.

Traps are received and processed by NMS applications like OV/NNM.

Syslog messages are received and processed by syslog daemon (which is standard for UNIX systems) and 3rd party syslog applications for Windows systems

As correctly metioned by you, you can configure a router to send syslog messages using the command logging a.b.c.d where a.b.c.d is the IP address of the syslog server

Enabling traps is a 2 step process:

snmp-server enable traps ?

Select which traps are of interest to you

snmp-server host a1.b1.c1.d1 public

where a1.b1.c1.d1 is the IP address of your NMS application

An excellent resource is the Cisco press book titled

Performance & Fault Management

ISBN: 1578701805

Here comes the tricky part: A syslog message can be encaspulated in a trap packet and sent to a trap receiver like OV/NNM. To enable a Cisco router to send a syslog message a SNMP trap, you would do the following:

snmp-server enable traps syslog

^^^^^^^

This functionality is not needed in most situations.

hth .. palani

[nojpt]

Thank you.

[jinjun.liu]

a