<p class="shortdesc">本文介绍如何添加支持SNMP trap的设备为资产，并展示监控设备的数据。</p> <section class="section context"><div class="tasklabel"><h2 class="doc-tairway">背景信息</h2></div> <p class="p">以交换机设备为例，介绍如何通过SNMP trap收集日志。</p> <p class="p">平台采用SNMP协议与资产进行通信，并通过oid获取资产的端口流量、设备状态等信息，在平台页面上通过图表展示监控信息。</p> </section> <section class="section limitation" id="SNMPDevice__mqk_vxc_hsb"><div class="tasklabel"><h2 class="doc-tairway">使用限制</h2></div> <ul class="ul" id="SNMPDevice__ul_hbb_t1d_hsb"> <li class="li">您已创建安全日志审计实例。</li> <li class="li">您已创建组织。</li> <li class="li">安全日志审计与要添加的资产之间网络通讯正常。</li> <li class="li">配置SNMP监控，需向资产的生产厂商获取设备MIB信息。</li> </ul> </section> <section><div class="tasklabel"><h2 class="doc-tairway">操作步骤</h2></div><ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">登录<a class="xref" href="https://www.ocftcloud.com/console/log-audit" target="_blank" rel="external noopener">安全日志审计SLA控制台</a>，进入<span class="keyword wintitle">实例列表</span>页面。</span> </li><li class="li step stepexpand"> <span class="ph cmd">单击目标实例<span class="ph uicontrol"> 操作</span>列的<span class="ph uicontrol">管理</span>，进入安全日志审计控制台。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__d22e53" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1ecc508f988a.png" width="830"> </div> </li><li class="li step stepexpand"> <span class="ph cmd">选择<span class="ph menucascade"><span class="ph uicontrol">规则库</span><abbr> > </abbr><span class="ph uicontrol">解决方案</span><abbr> > </abbr><span class="ph uicontrol">解决方案包</span></span>进入<span class="keyword wintitle">解决方案包</span>页面。</span> </li><li class="li step stepexpand"> <span class="ph cmd">单击<span class="ph uicontrol">新增</span>，设置名称为<strong class="ph b">用户定制SNMP监控</strong>，其他配置项可根据实际需求配置，单击<span class="ph uicontrol">保存</span>。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_yn5_hjn_prb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-11f9c7369113.png" width="830"> </div> </li><li class="li step stepexpand"> <span class="ph cmd">在解决方案包列表中找到<strong class="ph b">用户定制SNMP监控</strong>，并完成以下配置项：</span> <ol type="a" class="ol substeps" id="SNMPDevice__substeps_wm2_bvd_hsb"> <li class="li substep substepexpand"> <span class="ph cmd">单击<img class="image" id="SNMPDevice__image_bwh_rsd_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1f54fd149c95.png">图标，进入<span class="keyword wintitle">数据集管理</span>页面。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_r4s_5sd_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-11bc99b094ce.png" width="830"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">单击<span class="ph uicontrol">新增</span>，在选择框中单击<span class="ph uicontrol">Snmp监控数据集</span>。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_vth_5td_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1e76da2b998f.png" width="830"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">进入<span class="keyword wintitle">新增SNMP监控数据集</span>页面，输入数据集名称、设备OID，并选择字段名（其他配置项根据实际需求选择），单击<span class="ph uicontrol">保存</span>。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_at4_rvd_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1eb4dff991c5.png" width="830"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">单击<img class="image" id="SNMPDevice__image_snv_jwd_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-11d8a3389d7f.png">图标，进入<span class="keyword wintitle">监控图</span>页面。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_tnv_jwd_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-120c390c9e69.png" width="830"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">单击<span class="ph uicontrol">新增</span>进入<span class="keyword wintitle">新增监控图</span>页面。输入名称，选择刚刚创建的数据集（类型选择“SNMP监控”，名称根据实际需要选择，本文以H3C S5500EI交换机CPU为例），图表类型为实时监控图，其他配置项不填，单击<span class="ph uicontrol">保存</span>。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_pcx_vwd_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-173920c296cd.png" width="830"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">单击<img class="image" id="SNMPDevice__image_yzb_jn3_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-11e512499d23.png">图标进入监控频道页面。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_frz_f43_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1ec15cee92ef.png" width="830"> </div> </li> <li class="li substep substepexpand"> <span class="ph cmd">单击<span class="ph uicontrol">新增</span>进入<span class="keyword wintitle">新增频道</span>页面，选择<span class="keyword wintitle">模板监控图</span>页签，单击布局下面的<span class="ph uicontrol">新增一栏</span>，布局类型选择<span class="ph uicontrol">12</span>，然后选中SNMP监控图，单击<span class="ph uicontrol">添加到选中布局</span>，在绑定资产弹窗中选择对应资产，单击<span class="ph uicontrol">确定</span>。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_yvv_1p3_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-119e1ea29104.png" width="830"> <div class="p">单击<span class="ph uicontrol">保存</span>。<img class="image" id="SNMPDevice__image_jnw_cq3_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-172782729927.png" width="830"></div> </div> </li> </ol> </li><li class="li step stepexpand"> <span class="ph cmd">在菜单栏选择<span class="ph menucascade"><span class="ph uicontrol">审计概要</span><abbr> > </abbr><span class="ph uicontrol">用户定制SNMP监控</span><abbr> > </abbr><span class="ph uicontrol">交换机CPU监控</span></span>，查看之前添加的SNMP监控。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_z3k_qq3_hsb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-13fbd0b69418.png" width="830"> </div> </li><li class="li step stepexpand"> <span class="ph cmd">登录<a class="xref" href="https://www.ocftcloud.com/console/vpc/nat/list" target="_blank" rel="external noopener">NAT网关控制台</a>，选择<span class="ph uicontrol">安全组</span>，单击日志审计服务器名称进入<span class="keyword wintitle">安全组详情</span>页面， 依次单击<span class="ph uicontrol">安全组规则</span>、<span class="ph uicontrol">添加安全组</span>进入<span class="keyword wintitle">添加规则</span>页面，放行需要发送日志的客户端IP与端口号，如下图所示。</span> <div class="itemgroup info"> <img class="image" id="SNMPDevice__image_yn5_hjn_prg" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112056-15c0d63c90f8.png" width="600"> <div class="note important note_important" id="SNMPDevice__note_c1q_nzy_ysb"><span class="note__title">重要：</span> Syslog发送日志默认端口号为514，若资产发送日志使用的端口不是514，此处需要修改为资产发送日志使用的端口号与协议；授权IP即资产所在网段。其他配置项与上图保持一致即可。</div> </div> </li></ol></section>