Professional Documents
Culture Documents
agent data
agent data
managed device
managed device
8: Network Management 2
1
Network Management standards
8: Network Management 3
SNMP protocol
convey manager<->managed object info, commands
8: Network Management 4
2
SMI: data definition language
Purpose: syntax, semantics of Basic Data Types
management data well-
defined, unambiguous INTEGER
Integer32
base data types:
Unsigned32
straightforward, boring OCTET STRING
OBJECT-TYPE OBJECT IDENTIFIED
data type, status, IPaddress
semantics of managed Counter32
object Counter64
MODULE-IDENTITY
Gauge32
TimeTicks
groups related objects
Opaque
into MIB module
8: Network Management 5
SNMP MIB
MIB module specified via SMI
MODULE-IDENTITY
(100 standardized MIBs, more vendor-specific)
8: Network Management 6
3
SMI: Object, module examples
OBJECT-TYPE: ipInDelivers MODULE-IDENTITY: ipMIB
ipMIB MODULE-IDENTITY
ipInDelivers OBJECT TYPE LAST-UPDATED “941101000Z”
SYNTAX Counter32 ORGANZATION “IETF SNPv2
MAX-ACCESS read-only Working Group”
STATUS current CONTACT-INFO
“ Keith McCloghrie
DESCRIPTION
……”
“The total number of input DESCRIPTION
datagrams successfully “The MIB module for managing IP
delivered to IP user- and ICMP implementations, but
protocols (including ICMP)” excluding their management of
::= { ip 9} IP routes.”
REVISION “019331000Z”
………
::= {mib-2 48}
8: Network Management 7
8: Network Management 8
4
SNMP Naming
question: how to name every possible standard
object (protocol, data, more..) in every
possible network standard??
answer: ISO Object Identifier tree:
hierarchical naming of all objects
each branchpoint has name, number
1.3.6.1.2.1.7.1
ISO udpInDatagrams
ISO-ident. Org. UDP
US DoD MIB2
Internet management
8: Network Management 9
OSI
Object
Identifier
Tree
5
SNMP protocol
Two ways to convey MIB info, commands:
managing managing
entity entity
request
trap msg
response
6
SNMP protocol: message formats
8: Network Management 13
8: Network Management 14
7
Exercise
Try the command on icu0
$snmptranslate .1.3.6.1.2.1.7.1
$snmpwalk –v 1 –c public dafinn.cs.mtu.edu
.1.3.6.1.2.1.7.1
$snmpwalk –v 1 –c public dafinn.cs.mtu.edu system
$snmpwalk –v 1 –c public dafinn.cs.mtu.edu interface
$snmpwalk –v 1 –c public dafinn.cs.mtu.edu ip
$snmpwalk –Tp -IR
Visit http://dafinn.cs.mtu.edu/MRTG
Start snmpd on your box server
Install net-snmp from www.net-snmp.org
8: Network Management 15
8: Network Management 16
8
Packet Filtering
Internal network is Example 1: block incoming
connected to Internet and outgoing datagrams
through a router. with IP protocol field = 17
Router manufacturer and with either source or
provides options for dest port = 23.
filtering packets, based on: All incoming and outgoing
source IP address UDP flows and telnet
connections are blocked.
destination IP address
TCP/UDP source and Example 2: Block inbound
destination port numbers TCP segments with ACK=0.
ICMP message type Prevents external clients
from making TCP
TCP SYN and ACK bits
connections with internal
clients, but allows internal
clients to connect to
outside.
8: Network Management 17
as on IP/TCP/UDP fields.
Example: allow select
internal users to telnet
outside.
1. Require all telnet users to telnet through gateway.
2. For authorized users, gateway sets up telnet connection to
dest host. Gateway relays data between 2 connections
3. Router filter blocks all telnet connections not originating
from gateway.
8: Network Management 18
9
Limitations of firewalls and gateways
10