Chapter 9Network ManagementComputer Networking A Top Down A.docx
- 1. Chapter 9 Network Management Computer Networking: A Top Down Approach 6th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 A note on the use of these ppt slides: We’re making these slides freely available to all (faculty, students, readers). They’re in PowerPoint form so you see the animations; and can add, modify, and delete slides (including this one) and slide content to suit your needs. They obviously represent a lot of work on our part. In return for use, we only ask the following: If you use these slides (e.g., in a class) that you mention their source (after all, we’d like people to use our book!) If you post any slides on a www site, that you note that they are adapted from (or perhaps identical to) our slides, and note our copyright of this material. Thanks and enjoy! JFK/KWR All material copyright 1996-2012 J.F Kurose and K.W. Ross, All Rights Reserved Network Management 9-1
- 2. Network Management 9-2 Chapter 9: Network Management Chapter goals: introduction to network management motivation major components Internet network management framework MIB: management information base SMI: Structure of Management Information, data definition language SNMP: protocol for network management security and administration 2 Network Management 9-3 Chapter 9 outline What is network management? Internet-standard management framework Structure of Management Information: SMI Management Information Base: MIB SNMP Protocol Operations and Transport Mappings Security and Administration 3 Network Management
- 3. 9-4 What is network management? autonomous systems (aka “network”): 1000s of interacting hardware/software components other complex systems requiring monitoring, control: jet airplane nuclear power plant others? "Network management includes the deployment, integration and coordination of the hardware, software, and human elements to monitor, test, poll, configure, analyze, evaluate, and control the network and element resources to meet the real-time, operational performance, and Quality of Service requirements at a reasonable cost." 4 Network Management 9-5 Infrastructure for network management
- 4. managed device managed device managed device managed device definitions: managed devices contain managed objects whose data is gathered into a Management Information Base (MIB) managing entity data managing entity
- 5. agent
- 6. data agent data agent data agent data network management protocol managed device agent data 5 Network Management 9-6 Network management standards
- 7. OSI CMIP Common Management Information Protocol designed 1980’s: the unifying net management standard too slowly standardized SNMP: Simple Network Management Protocol Internet roots (SGMP) deployed, adopted rapidly growth: size, complexity currently: SNMP V3 de facto network management standard 6 Network Management 9-7 What is network management? Internet-standard management framework Structure of Management Information: SMI Management Information Base: MIB SNMP Protocol Operations and Transport Mappings Security and Administration Chapter 9 outline 7 Network Management 9-8 SNMP overview: 4 key parts Management information base (MIB):
- 8. distributed information store of network management data Structure of Management Information (SMI): data definition language for MIB objects SNMP protocol convey manager<->managed object info, commands security, administration capabilities major addition in SNMPv3 8 Network Management 9-9 SNMP naming question: how to name every possible standard object (protocol, data, more..) in every possible network standard?? answer: ISO Object Identifier tree: hierarchical naming of all objects each branch point has name, number 1.3.6.1.2.1.7.1 ISO ISO-ident. Org. US DoD Internet udpInDatagrams UDP
- 13. Network Management 9-11 SNMP protocol Two ways to convey MIB info, commands: agent data managed device managing entity agent data managed device managing entity trap msg request request/response mode trap mode response
- 14. 11 Network Management 9-12 SNMP security and administration encryption: DES-encrypt SNMP message authentication: compute, send MIC(m,k): compute hash (MIC) over message (m), secret shared key (k) protection against playback: use nonce view-based access control: SNMP entity maintains database of access rights, policies for various users database itself accessible as managed object! 12 Network Management 9-13 Network management: summary network management extremely important: 80% of network “cost” SNMP protocol as a tool for conveying information network management: more art than science what to measure/monitor how to respond to failures? alarm correlation/filtering? 13