The NMS trap response action specifies a network management system to use for quarantine
enforcement at the switch-level.
Procedure
- Review Create or edit a response action.
- Select NMS Trap from the Action Type list.
- Click
NMS Trap Destination and Settings (or click
Next), and then enter the following:
- NMS IP address — Specify the IP address of the NMS system.
- Destination Port — Type a Destination Port (any value from 1-65535) or accept the default port (162).
- Click
SNMP Settings (or click
Next), and then enter the following:
- SNMP Version — Select the version of the SNMP agent to use for traps (version 2 or 3).
- Test OID — Specifies the object identifier (OID) used for the trap.
- Community-based Security Model — If using SNMPv2, specify the community string (for example: "public") to use when sending trap messages.
- User-based Security Model — If using SNMPv3, specify the username and the authentication method and information required in your security model.
- Click
Primary Action Settings (or click
Next), and then enter the following:
- Primary Action type — Select RADIUS Reauthentication (default), VLAN isolation, or disable port to specify the action.
- NAM rule — Specify the NAM rule if the NMS requires it.
- Active Directory Group — Specify the active directory group to use for lookup.
- Quarantine VLAN — Specify the quarantine VLAN address.
- Perform VLAN check — Specify whether to check for VLAN preconditions before attempting this action.
- Drop Port Link — Drops the port link for 10 seconds if this action is successful. In some configurations, such as 802.1x with an XP client, this causes a DHCP lease renewal.
Note
This is the criteria used to enact the SMS response action. It is attempted first if you configure secondary and final settings for the action. - (Optional) Click
Secondary Action Settings (or click
Next) to specify the secondary action settings.
These options are the same as what is described for primary action settings.