What SNMP and What it do 

?
SNMP (Simple Network Management Protocol) is Network monitoring Protocol

SNMP Poll network connecte devices

Switch router, can receive data, bloc data, have ACL, …..

SNMP Server will POLL the devices in network, the POLL is done on interval of time (example 60 sec)

SNMP is not just for network devices, it is for all connected to network, or computer, like (printer,
thermostat, Server, and all IoT devices, ......)
SNMP when POLL data, can make graph, can say what is downloaded now and what is downloaded
before 60 sec 10 min …..,

As shown in figure, SNMP server make graph for operation of all devices like Data load, soi t is gather
information from devices, so we call it monitoring,

So what is OID and MIB

OID look like IP addresses, 1.10.22.6.7.8.99.0….., SO OID is one number of those set before, OID are
Object ID that we monitor,

Example We get coffee machine: we can set HOT temperature as OID, what the strength of coffee as
OID

And all OID are stored i, a book called MIB == Management information Base

All thinks that need to be monitored need MIB

Let look at the SNMP Version
V1 QLIMITED TO HUNDRED MEGA BITE / SEC BUT CAN DO MONITORIJ+NG WITH OID/MIB

V2C it is popular can monitor and have limited authentication, with key called CS, community
strength, with R/O public and RW private, with the key that someone have, he can change the config
on devices

V3 : We have all of 1 and 2 and we have Group, User, View, so we have level User/group: right
added and encryption
When unplug interface on device we get new messages with sevrity
Show log command can show all log in cisco devices

If we reboot messages are lost (INFORMATION)

To see logs we must connect to the devices in our example AZ-RT01

If you would like to send logging to server, set

Logging IP address of the server,

If you would like to see logs in server:

Find free server
One very good syslog server
Quality of service depend on what you are using internet for ?

So if we have phone call with lost or delay, is very dramatic vs HTML web page

Traffic discrimination:

Phone traffic is more important than server,

Server traffic is more important than Laptops, desktop station

First, we have traffic classification: this mean that, you can identify traffic by what interface is coming
from, example come from VLAN 10 this is VOIP, or Come from VLAN 20 Server;

we can use access List with port, as example Port 80, that is web Traffic

Mark :

Imagine we get box of apples, with ticket over the box as label, this can make easy to identify the
traffic, this use Layer 2 Cos, and Layer 3 Tos