SNMPv1 陷阱未從交換器傳送

客戶設定 SNMP V1，但不會從交換器傳送陷阱。

• 陷阱連接埠被防火牆封鎖
• 已設定存取控制清單

疑難排解步驟：

1. 客戶是否可以從交換器對收件者 IP 執行 ping？

   ping x.x.x.x

2. 與客戶確認是否有防火牆阻擋了疏水閥埠 162。如果遭到封鎖，客戶必須開啟連接埠 162

3. 收集 supportsave，在 supportshow 中檢查「SNMPv1 項目」

   snmpconfig --show snmpv1

ACL 問題

4. 檢查客戶是否已設定 存取控制清單，請在 supportshow 中檢查「存取控制清單」。

   snmpconfig --show accesscontrol

在以下範例中，存取控制清單中設定的主機與在 SNMP V1 社群 1 中設定的陷阱收件者 IP 不相符。如果未配置 ACL，陷阱將發送到收件者 IP。必須在訪問控制清單中添加陷阱收件者IP，才能將陷阱發送給配置的收件者。ACL 也可移除。

檢查 SNMP V1 的組態：
> snmpconfig --show snmpv1

SNMPv1 社群和陷阱收件者組態：

  Community 1: Test_Config (rw)
    Trap recipient: 10.xxx.xxx.xxx
    Trap port: 162
    Trap recipient Severity level: 0
  Community 2: OrigEquipMfr (rw)
    No trap recipient configured yet
  Community 3: private (rw)
    No trap recipient configured yet
  Community 4: public (ro)
    No trap recipient configured yet
  Community 5: common (ro)
    No trap recipient configured yet
  Community 6: FibreChannel (ro)
    No trap recipient configured yet

> snmpconfig --show accesscontrol

SNMP 存取清單組態：

Entry 0:  Access host subnet area 10.xxx.xxx.xxx (rw) (does not match recipient IP)
Entry 1:  No access host configured yet
Entry 2:  No access host configured yet
Entry 3:  No access host configured yet
Entry 4:  No access host configured yet
Entry 5:  No access host configured yet

若要解決此問題，請將陷阱收件者IP添加到ACL。
> snmpconfig --set accesscontrol

SNMP 存取清單組態：

Access host subnet area : [10.xxx.xxx.xxx]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0] 10.xxx.xxx.xx
Read/Write? (true, t, false, f): [true] t
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Committing configuration.....done.

確認已在 ACL 中設定陷阱收件者 IP。
> snmpconfig --show accesscontrol

SNMP 存取清單組態：

Entry 0:  Access host subnet area 10.xxx.xxx.xxx (rw)
Entry 1:  Access host subnet area 10.xxx.xxx.xxx (rw)
Entry 2:  No access host configured yet
Entry 3:  No access host configured yet
Entry 4:  No access host configured yet
Entry 5:  No access host configured yet

**此外，如果不需要 ACL 或 ACL 不正確，客戶可以移除任何已設定的 IP。下圖顯示如何移除 ACL 中不正確的 IP。若為任何預先設定的主機，請輸入 0.0.0.0。對應刪除的任何IP執行相同的步驟。

>snmpconfig --set accesscontrol

SNMP 存取清單組態：

Access host subnet area : [10.xxx.xxx.xxx] 0.0.0.0
Read/Write? (true, t, false, f): [true]
Access host subnet area : [10.241.213.181]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]
Access host subnet area : [0.0.0.0]
Read/Write? (true, t, false, f): [true]

Committing configuration.....done.

> snmpconfig --show accesscontrol

SNMP 存取清單組態：

Entry 0:  No access host configured yet
Entry 1:  Access host subnet area 10.xxx.xxx.xxx (rw)
Entry 2:  No access host configured yet
Entry 3:  No access host configured yet
Entry 4:  No access host configured yet
Entry 5:  No access host configured yet