Network Management System Using SNMP Speaker YungDa Chen

Network Management System Using SNMP Speaker : Yung-Da Chen Advisor : Dr. Kai-Wei Ke Date : 2011/01/07

Outline �Introduction to Network Management (NM) �Simple Network Management Protocol (SNMP) �Structure of Management Information (SMI) �Management Information Bases (MIBs) �Relate Tools �Conclusion �Future Works �References 2 Network Management System

Network Management Standard ISO, IETF, ITU-T, …, etc. 3 Network Management System

Network Management �Definition �OAM&P of Network and Services �OAM&P: Operations, Administration, Maintenance, and Provisioning �Goal �Network Resources �Accuracy / Reliability / Efficiency / Security �Quality of Service 4 Network Management System

Network Management Standards �NM Standards �ISO - OSI �Common Management Information Protocol (CMIP) �Common Management Information Service (CMIS) �IETF - Internet �Simple Network Management Protocol (SNMP) �ITU-T �Telecommunications Management Network (TMN) 5 Network Management System

NM Standards (cont. ) �Differences ISO IETF TMN Management should be Define management powerful simple architecture only 6 Object Oriented Approach Variable Oriented Approach Using OSI protocol (CMIP & CMIS) Reliable underlying transport Unreliable transport mechanisms Management Information is exchanged out-of-band Network Management System

History COPIED: • Manager-Agent concept • MIBS • ASN. 1 • TERMINOLOGY starting as temporary solution many ideas were copied from OSI Management framework OSI introduced new ideas Real object orientation OSI Protocol Copied 7 Network Management System

OSI NM Architecture and Model Manager Network Management Organization Model Agent Object Information Model Communication Model Structure of Management Information (SMI) Management Information Base (MIB) Protocol Data Unit (PDU) Configuration Management (CM) Fault Management (FM) Functional Model Performance Management (PM) Security Management (SM) Accounting Management (AM) 8 Network Management System

SNMP Architecture and Model � Organization Model �Same as OSI model � Information Model �Same as OSI model � Communication Model �Message less complex then OSI �Transfer structure (PDU) � Functional Model �Application functions � Operations � Administration � Security 9 Network Management System

TMN Architecture �Address management of telecommunication networks �Based on OSI model �Superstructure on OSI network �Addresses network, service, and business management 10 Network Management System

Other Groups �DMTF (Distributed Management Task Force) �WBEM: Web Based Enterprise Management �CIM: Common Information Model �TM-Forum (Tele-Management Forum) �Originally based on OSI �OMG (Object Management Group) �Looking at CORBA for management �IEEE (Institute of Electrical and Electronics Engineers) �Addresses LAN and MAN management �Adopts OSI standards 11 Network Management System

SNMP Simple Network Management Protocol 12 Network Management System

What is SNMP �Different from ICMP (Internet Control Message Protocol) Ping (Packet Internet Grouper) � Remote and local management �Including servers, workstations, routers, switches and other managed devices �Advantages of using SNMP �Standardized �Universally supported �Allows distributed management access �Lightweight protocol 13 Network Management System

Standard � SMI (Structure of Management Information) �Rules specifying the format used to define objects managed that the SNMP protocol accesses � SMIv 1: RFC 1155 � SMIv 2: RFC 2578 � MIBs (Management Information Bases) �Tell what management information exists � MIB-I: RFC 1156 � MIB-II: RFC 1213 � SNMP (Simple Network Management Protocol) �Define how information is exchanged between NMS and Agent � SNMPv 1: RFC 1157 � SNMPv 2: RFC 1901, 1905, 1906 � SNMPv 3: RFC 2571, 2572, 2573, 2574, 2575 14 Network Management System

SNMP Versions � SNMPv 1 �Proposed in 1989 �SNMP information include “version number”, “Community Name”, and “PDU” � SNMPv 2 �Proposed in 1993, Revised in 1995 �An upgrade to SNMPv 1 �Add functional enhancements to SNMPv 1 (ex: Get. Bulk- PDU) � SNMPv 3 �Proposed in 1998 �Define Authentication, Security, and Access Control for SNMP security mechanism �Used with the functionality provided by SNMPv 2 15 Network Management System

Principle Operation Manager Transport SNMP v 1 : unreliable v 2/v 3: reliable alternatives poll GET/SET poll TRAPS Agents variable MIB table 16 Network Management System

Principle Operation (cont. ) SNMP Managed Agent Manager Application Managed Resource 17 Trap Get-Request Get. Next-Request Set-Request Get-Response Managed Objects Trap Get-Request Get. Next-Request Set-Request Get-Response SNMP Manager Station UDP IP IP DLC / MAC PHY Network Management System Port 161 Port 162 MIB

SNMP Community � Manager & Agent : trust relationship upon community � The basic security of SNMP � Used to identify the group of nodes � Define where an SNMP message is destined for � Only when two applications in the same community group can communicate with each other � Default community name �public �private � Each community name is assigned an access mode �read-only (default for “public” community) �read-write (default for “private” community) 18 Network Management System

SNMP Command Protocol Data Units (PDUs) SNMPv 2 • • • 19 get SNMPv 1 getnext set getresponse trap Network Management System • • • getnext set getresponse trap getbulk notification inform report SNMPv 3 • • • getnext set getresponse trap getbulk notification inform report

RMON �RMON, Remote MONitoring �RMON agents or probe has MIBs �v 1: RFC 1757 �v 2: RFC 2021 �Monitor the data flowing on the remote network using probe or RMON agents �An extension of the network manager’s operation �Reduces the amount of information required to be transmitted to NMS (data collection as offline mode) 20 Network Management System

RMON (cont. ) Network Management Station Rmon Groups (1. 3. 6. 1. 2. 1) Statistic Group (1) Traffic Matrix Group (6) History Group (2) Filter Group (7) Alarms Group (3) Capture Group(8) Hosts Group (4) Events Group (9) Host Top N Group (5) RMON Agent/Probe WAN circuit RMON-MIBs Agent MIB 21 Network Management System

Proxy Agents � Proxy Agents extend the capabilities of SNMP by allowing it to �Manage a device that cannot support an SNMP agent �Manage a device that supports a non-SNMP management agent �Allow a non-SNMP management system to access an SNMP agent �Provide firewall-type security to other SNMP agents (UDP packet filtering) �Translate between different formats of SNMP messages (v 1 and v 2) �Consolidate multiple managed nodes into a single network address (also to provide a single trap destination) 22 Network Management System

SMI & MIBs SMI, ASN. 1, BER, OID, MIB, …, etc. 23 Network Management System

Language of SNMP �SMI (Structure of Management Information) �Specifies the format used for defining managed objects that are accessed via the SNMP protocol �ASN. 1 (Abstract Syntax Notation One) �Used to define the format of SNMP messages and managed objects (MIB modules) using an unambiguous data description format �BER (Basic Encoding Rules) �Used to encode the SNMP messages into a format suitable for transmission across a network 24 Network Management System

ASN. 1 �Addresses both syntax and semantics �Two type of syntax �Abstract syntax: syntax set of rules that specify data type and structure for information storage �Transfer syntax: syntax set of rules for communicating information between systems �Makes application layer protocols independent of lower layer protocols �Can generate machine-readable code: Basic Encoding Rules (BER) is used in management modules 25 Network Management System

BER �CCITT X. 209 specifies the Basic Encoding Rules �The relationship between ASN. 1 and BER parallels that of source code and machine code �All SNMP messages are converted / serialized from ASN. 1 notation into smaller, binary data (BER) 26 Network Management System

SMI �Denotes : �How MIB variables in an MIB are related to one another �How variables are formatted �Information to obtain the standardization of the MIB �Purpose: to make the definition of new MIBs easier �Help to guide MIB designer �Define the syntax �Allow tools to be built 27 Network Management System

SMI (cont. ) �SMI defines for a managed object �Syntax �Semantics �Other information (ex: status) �Definition of the high-level structure of the internet branch (iso(1). org(3). dod(6). internet(1)) iso(1). org(3). dod(6). internet(1) of the MIB naming tree �The subset of the ASN. 1 language that is used in MIBs 28 Network Management System

SMI Object Tree Root-Node ccitt(0) iso(1) joint(2) org(3) dod(6) internet(1) dictionary(1) 29 mgmt(2) experimental(3) private(4) internet OJECT IDENTIFIER : : = { iso org(3) dod(6) 1 } directory OJECT IDENTIFIER : : = { internet 1 } mgmt OJECT IDENTIFIER : : = { internet 2 } experimental OJECT IDENTIFIER : : = { internet 3 } private OJECT IDENTIFIER : : = { internet 4 } Network Management System

Summary SNMP message command MIB SMI BER Managed Object ASN. 1 30 Network Management System

SMIv 2 �SMIv 2 improves SMIv 1 �“snmp. V 2” branch additional � 1. 3. 6. 1. 6. 3. 1. 1 �iso. org. dod. internet. snmp. V 2. snmp. Modules. snmp. MI B. snmp. MIBObjects �Other new object type definition 31 Network Management System

Standard Naming Tree Root ccitt(0) stnd(0) iso(1) reg-auth(1) joint(2) mib(2) org(3) dod(6) internet(1) dictionary(1) mgmt(2) experimental(3 ) mib-2(1) private(4) security(5) snmp. V 2(6) enterprises(1) snmp. Domains (1) snmp. Proxies( 2) snmp. Modules( 3) snmp. MIB(1) snmp. MIBObje ct(1) 32 Network Management System

Object Definition Form <name> OBJECT-TYPE SYNTAX <datatype> Units. Parts <Optional, See below> MAX-ACCESS < See below > STATUS < See below > DESCRIPTION “Textual description describing this particular managed object. ” AUGMENTS { <name of table> } : : = { <Unique OID that defines this object> } Object Definition 33 Description Units. Parts time unit's description (ex. seconds, milliseconds, etc. ) MAX-ACCESS read-only, read-write, read-create, not-accessible, and accessible-for-notify STATUS current(mandatory), obsolete, and deprecated AUGMENTS increase one or more columns for expand the table Network Management System

Object Type Definition OBJECT-TYPE: SYNTAX MAX-ACCESS STATUS DESCRIPTION 34 Network Management System INTEGER OCTET STRING OBJECT IDENTIFIER BITS Ip. Address Integer 32 Counter 64 Gauge 32 Time. Ticks Opaque New Type read-only read-write read-create accessible-for-notify not-accessible current deprecated obsolete “”

MIB-II �MIB-II is the most important management group of SNMP �Each device (which supports SNMP) supports MIB-II as well �RFC 1213 -MIB defined the branch of mib-2’s OIDs �Defined base on SMIv 1 �mib-2 defined as �iso. org. dod. internet. mgmt. 1 � 1. 3. 6. 1. 2. 1 35 Network Management System

MIB-II (cont. ) (1. 3. 6. 1. 2. 1) mib-2(1) 36 system(1) (1. 3. 6. 1. 2. 1. 1) 7 sys. Descr, sys. Name, sys. Uptime, … interfaces(2) (1. 3. 6. 1. 2) 23 if. In. Error, if. Out. Error, … at(3) (1. 3. 6. 1. 2. 1. 3) 3 (Address Translation), at. Phys. Address, … ip(4) (1. 3. 6. 1. 2. 1. 4) 42 ip. Routing. Table, ip. Net. To. Media. Table, … icmp(5) (1. 3. 6. 1. 2. 1. 5) 26 icmp. In. Echos, icmp. Out. Echos, … tcp(6) (1. 3. 6. 1. 2. 1. 6) 19 tcp. Conn. Table, … udp(7) (1. 3. 6. 1. 2. 1. 7) 6 udp. Table, … egp(8) (1. 3. 6. 1. 2. 1. 8) 20 egp. Neigh. As, … transmission(10) (1. 3. 6. 1. 2. 1. 10) 0 non snmp(11) (1. 3. 6. 1. 2. 1. 11) 30 snmp. In. Traps, … Network Management System

Relate Tools SNMP Agents, NMS, Trend Analysis Tool, …, etc 37 Network Management System

Relate Tools � SNMP Agents � Advent. Net SNMP Agent � Microsoft �… � NMS � HP Open. View � Net-SNMP � Nagios � Open. NMS � NINO �… � Trend Analysis Tool � MRTG (Multi Router Traffic Grapher) � RRDtool �… � Others � ping, ipconfig / ifconfig, arp, netstat, tracert / traceroute, …, etc. 38 Network Management System

Conclusion, Future Works, and References 39 Network Management System

Conclusion �SNMP become the most popular Network Management System for INTERNET world �Current SNMP used �SNMPv 1 �SNMPv 2 c �SNMPv 3 �Current SMI used �SMIv 2 �Current MIB used �MIB-II 40 Network Management System

Future Works �Monitor Analysis �Self-Similar Traffic Analysis on Wi. MAX �Network Topology Discovery �Boundary discovery �Fault Management �Delay �Universal Network Monitoring and Management System for Heterogeneous Communication Networks, HNMS �NSC 99 -2220 -E-027 -007 41 Network Management System

References � Douglas R. Mauro, and Kevin J. Schmidt, “Essential SNMP 2 e, ” O’Reilly Media Inc. , 2007 �Sean J. Harnedy, “Total SNMP : exploring the Simple Network Management Protocol, ” Prentice Hall PTR, 1998 �Dedi Rahmawan Putra, “Network Management System, ” available at http: //netlab. csie. ntut. edu. tw/seminar/year 2007/D RP_20080311. ppt �The Simple. Web, URL: http: //www. simpleweb. org/ 42 Network Management System

Q&A