EventSentry can receive SNMP v1, v2c and v3 traps from remote network devices. The SNMP trap daemon can either log incoming traps to the application event log or store them in a database.
To activate the SNMP trap daemon, check the Enable SNMP Trap Daemon check box on the "General" tab and configure either the database or event log feature. The default SNMP port is 162, but can be changed to another port.
Threshold Settings
To limit the number of incoming traps that are processed by the daemon, change the maximum number of messages and the applicable time period. The daemon will drop incoming packets if the count exceeds the number specified in Maximum number of allowed messages for the configure Time Period.
Authorized IP Addresses / Networks
For enhanced security you will have to specify from which hosts the daemon will accept packets. Please note that host names are not allowed in the list, you can only specify IP addresses.
IP addresses can be entered with or without specifying the subnet bits. For example, to only add two servers with the IP addresses 184.23.22.11 and 184.23.22.43, simply add those two IP addresses to the list.
To authorize a whole subnet, for example the IP addresses 184.23.22.1 - 184.23.22.254, add 184.23.22.0/24. To only allow the range of 184.23.22.128 - 184.23.22.254 then specify 184.23.22.128/25.
Compatibility
The daemon should work with any SNMP compatible device that supports v1, v2c or v3.
