SNMP Network Management (I)*
Chapter 4 from Mani Subramanian Network Management:
Principles and practice, Addison-Wesley, 2000.
*
SNMP Network Management
Organization Model
Communication Model
Information Model
Structure
of
Management
Information (SMI)
Managed Objects
Management
Information Base
(MIB)
SNMP Administrative Model
SNMP Protocol Specs
Organization Model
MDB
Describes components of a
network management system
Focuses on functions and
infrastructure
Objects are network
elements such as hubs,
bridges, routers, etc.
Managed elements have a
process running them called
an agent
Manager queries the agent,
gets information, processes it
and stores it in the MDB
MIB
SNMP Manager
agent
agent
Managed Objects
Unmanaged Objects
A simplified hierarchical
(2-tier) setup
Organization Model
Multiple managers, 1 agent
An agent responds to
any management system
that communicates with
it using SNMP
An NMS provided by a
vendor is in a better
position to manage,
monitor and configure all
NEs coming from that
same vendor
MIB
SNMP Manager
SNMP Manager
Managed
agent
Object
Managed Objects
Managers may have restricted
access to managed objects
Organization Model
Manager receives pre-
processed data
RMON (Remote
Monitoring): acts as an
agent and a manager
RMON gathers data from
MO, analyses the data,
and stores the data
Communicates the
statistics to the manager
MIB
SNMP Manager
SNMP Manager
Managed
agent
Object
Managed Objects
RMON Probe
Managers may have restricted
access to managed objects
3-tier architecture
Organization Model
Proxy server converts
non-SNMP data from
non-SNMP objects to
SNMP compatible
objects and messages
MIB
SNMP Manager
Proxy Server
Managed
agent
Object
Non-SNMP
Managed Objects
SMMP Managed Objects
unmanaged
Objects
SNMP Network Management
Organization Model
Communication Model
Information Model
Structure
of
Management
Information (SMI)
Managed Objects
Management
Information Base
(MIB)
SNMP Administrative Model
SNMP Protocol Specs
Communication Model
MANAGER
M
SN
ing
l
l
Po
p
a
r
T
AGENTS
MIB
Communication Model
Communicate mgnt information between network
mgnt stations and managed elements
Goals:
Management functions maintained by agents are kept
simple
Protocol flexibility (addition of new aspects of
operation and management)
Transparency (should not be affected by the
architecture of particular hosts and gateways)
Operation: 5 messages
get-request, get-next request, set-request
get-response, trap
SNMP messages are exchanged using UDP (connection
less) transport protocol
Communication Model
SNMP Manager
SNMP messages
SNMP agent
UDP
UDP
IP
IP
DLC
DLC
PHY
PHY
Network or
Internet
Physical Medium
Trap
Get-Response
SNMP Agent
Application
Set-Request
Application
Manages objects
Trap
Get-Response
Set-Request
GetNext-Request
Get-Request
SNMP Manager
Application
GetNext-Request
Management
Data
SNMP Agent
Get-Request
SNMP Manager
SNMP Network Management
Organization Model
Communication Model
Information Model
Structure
of
Management
Information (SMI)
Managed Objects
Management
Information
Base
(MIB)
SNMP Administrative Model
SNMP Protocol Specs
Structure of Management
Information
RFC 1155:
Structure of Management
Information
A common representation for data between both
manager and agent
Defines the syntax (using ASN.1) to describe
management information
Data types and
Rules used to define managed objects in a MIB
Generic objects and private (vendor specific)
objects conforming to SMI rules (RFC 1155) can
be managed by SNMP
SMI, Objects and Instances
Objects have: object
types and object
instances
SMI is concerned with
types and not instances
Object type
Name (unique descriptor
and object identifier)
Syntax (ASN.1)
Encoding (BER)
Object
Object
Type
Name:
OBJECT
IDENTIFIER
Syntax:
ASN.1
Object
Instance
Encoding:
BER
Managed Object : Type and Instance
SMI, Objects and Instances
Object
NMS
[Link]
Object
Type
[Link]
Name:
OBJECT
IDENTIFIER
Router 2
Backbone Network
Syntax:
ASN.1
Object
Instance
Encoding:
BER
Managed Object : Type and Instance
Router 1
[Link]
Hub 1
[Link]
Hub 2
[Link]
A Managed LAN Network
A hub is an object type
A hub with IP [Link] is an
instance of the object
SMI, Objects and Instances
Title: System Information: [Link]
Name or IP Address: [Link]
System Name
System Description
System Contact :
System Location
System Object ID
System Up Time
:
: 3Com LinkBuilder FMS, SW version:3.02
:
: .[Link].[Link]
: (2475380437) 286 days, [Link].37
System Information on [Link] Hub
Name:
OBJECT
IDENTIFIER
Title: System Information: [Link]
Name or IP Address: [Link]
System Name
System Description
System Contact :
System Location
System Object ID
System Up Time
:
: 3Com LinkBuilder FMS, SW version:3.12
:
: .[Link].[Link]
: (3146735182) 364 days,[Link].82
System Information on [Link] Hub
Object
Object
Type
Syntax:
ASN.1
Encoding:
BER
Object
Instance 3
Object
Instance 2
Object
Instance 1
Managed Object : Type with Multiple Instances
SMI, Names
root
Each managed object is
associated with an
identifier (OBJECT
IDENTIFIER)
Identifiers are used to
name objects and they
are unique for managed
objects
identifier is a sequence
of integers
ccitt(0)
iso(1)
joint-iso-ccitt(2)
org(3)
internet(1)
mgmt(2)
mib-2(1)
dod(6)
private(4)
experimental(3)
enterprise(1)
internet OBJECT IDENTIFIER ::= { iso(1) org(3) dod(6) 1 }
::= {1 3 6 1 }
Name of managed object
::= {iso standard dod internet}
SMI, Names
Internet
{1 3 6 1}
directory
(1)
Reserved for
future use
mgmt
(2)
experimental
(3)
private
(4)
To identify objects used
in Internet experiments
Used for objects defined in
IAB-approved documents
Used heavily by
commercial vendors
Sub-nodes under Internet
SMI, Names
Internet
{1 3 6 1}
directory
(1)
mgmt
(2)
experimental
(3)
mib-2
(1)
system (1)
interfaces (2)
at (3)
ip (4)
icmp (5)
snmp (11)
transmission (10)
cmot (9)
egp (8)
udp (7)
tcp (6)
private
(4)
SMI, Names
Internet
{1 3 6 1}
directory
(1)
mgmt
(2)
experimental
(3)
private
(4)
enterprises
(1)
cisco
(9)
hp
(11)
3Com
(43)
Cabletron
(52)
SMI, SNMP Syntax
SNMP ASN.1
Data Type
Tag
Structure
Number
Class
Simple
or
Primitive
Defined
or
Application
Constructor
or
Structured
Universal
Application
Contextspecific
Private
SNMP Primitive Data Types
Data Type
INTEGER
OCTET STRING
OBJECT IDENTIFIER
NULL
Subtype:
Comments
Subtype INTEGER (n1..nN)
Special case: Enumerated INTEGER type
8-bit bytes binary and textual data
Subtypes can be specified by either
range or fixed
Object position in MIB
Placeholder
INTEGER (0..255)
OCTET STRING (SIZE 0..255)
OCTET STRING (SIZE 8)
Special case of INTEGER
data type (enumeration):
error-status INTEGER {
noError(0)
tooBig(1)
genErr(5)
authorizationError(16)
}
Application-Wide SNMP Types
[Link]
IpAddress ::= [APPLICATION 0] IMPLICIT
OCTET STRING (SIZE (4)) A0 55 80 01
Counter
::= [APPLICATION 1] IMPLICIT
INTEGER (0..4294967295)
231
Gauge
::= [APPLICATION 2] IMPLICIT
INTEGER (0..4294967295)
231
0 1 2
TimeTicks ::= [APPLICATION 3] IMPLICIT
INTEGER (0..4294967295)
0 10 20 [ms]
Opaque
::= [APPLICATION 4] IMPLICIT
OCTET STRING
SNMP Structured Types
SEQUENCE,SEQUENCE OF
SET and SET OF of ASN.1 are not included
in SNMP-based management
Used to build lists and tables
SEQUENCE {<type1>, <type2>,.., <typeN>}
1
2
3
4
5
6
Object
ipAdEntAddr
ipAdEntIfIndex
ipAdEntNetMask
ipAdEntBcastAddr
ipAdEntReasmMaxSize
ipAddrEntry
Managed objects
OBJECT IDENTIFIER
{ipAddrEntry 1}
{ipAddrEntry 2}
{ipAddrEntry 3}
{ipAddrEntry 4}
{ipAddrEntry 5}
{ipAddrTable 1}
ObjectSyntax
IpAddress
INTEGER
IpAddress
INTEGER
INTEGER
SEQUENCE
Their location in Their data types
the MIB
SNMP Structured Types
List:
IpAddrEntry ::=
SEQUENCE {
ipAdEntAddr
IpAddress
ipAdEntIfIndex
INTEGER
ipAdEntNetMask
IpAddress
ipAdEntBcastAddr
INTEGER
ipAdEntReasmMaxSize
INTEGER (0..65535)
}
Managed Object IpAddrEntry as a list
Object Name
ipAddrTable
Table: ipAddrTable ::=
SEQUENCE OF
OBJECT IDENTIFIER
{ip 20}
Syntax
SEQUENCE OF
IpAddrEntry
Managed Object ipAddrTable as a table
ipAddrTable is made up of instances of idAddrEntry object
SMI, Encoding
Basic Encoding Rules, BER
Data Types and Tags
Type
Tag
OBJECT IDENTIFIER
UNIVERSAL 6
SEQUENCE
UNIVERSAL 16
IpAddress
APPLICATION 0
Counter
APPLICATION 1
Gauge
TimeTicks
Opaque
APPLICATION 2
APPLICATION 3
APPLICATION 4
Encoding of Object Identifiers: Packs the first two
integers into a single sub-identifier
SMI, Encoding
enterprise OBJECT IDENTIFIER ::=
{iso(1) org(3) dod(6) internet(1) private(4) 1}
X
Y
Z = 40X + Y
43
0
06
05
2B
06
4
0
01
04
1
0
01
Managed Objects
system(1)
sysDescr(1) sysObjectID(2) sysUpTime(3) sysContact(4)
Textual name: mnemonic; always begins with lower case
o
OBJECT IDENTIFIER: unique position of the managed
object in the MIB
Syntax: the ASN.1 definition of the object type
Access: read-only, read-write, not-accessible (e.g., tables)
Status: mandatory, optional, obsolete
Definition: textual description of the object type
Managed Objects
system(1)
sysDescr(1) sysObjectID(2) sysUpTime(3) sysContact(4)
OBJECT:
sysDescr:
Syntax:
Definition:
Access:
Status:
{ system 1 }
OCTET STRING
"A textual description of the entity. This value
should include the full name and version
identification of the system's hardware type,
software operating-system, and networking
software. It is mandatory that this only contain
printable ASCII characters."
read-only
mandatory
Specifications for System Description
Macros for Managed Objects
A formal definition for managed objects
SMI Definitions
Macros for Managed Objects
Using OBJECT-TYPE MACRO to define a managed object
of the system group in the MIB
sysDescr OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
A textual description of the entity. This
value should include the full name and version
identification of the systems hardware type,
software operating-system, and networking software.
It is mandatory that this only contain printable
ASCII characters.
::= { system 1 }
Macros for Managed Objects
system(1)
sysDescr(1) sysObjectID(2) sysUpTime(3) sysContact(4)
sysUpTime OBJECT-TYPE
SYNTAX TimeTicks
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The time (in hundredths of a second)
since the network management portion of
the system was last re-initialized."
::= { system 3 }
Aggregate Objects
A group of related objects (also called tabular objects)
Represented by a table with
o
o
Columns of objects
Rows of instances
Example: IP address table
Consists of objects:
IP address
Interface
Subnet mask (which subnet this address belongs to)
Broadcast address (value of l.s.b. in IP broadcast address)
Largest IP datagram that can be assembled
Multiple instances of these objects associated with the node
Aggregate Object Macro-ipAddrTable (RFC 1155)
ipAddrTable OBJECT-TYPE
Syntax SEQUENCE OF IpAddrEntry
Access not-accessible
STATUS mandatory
Definition "The table of addressing information
relevant to this entity's IP addresses."
::={ip 20}
ipAddrEntry OBJECT-TYPE
Syntax IpAddrEntry
Access not-accessible
STATUS mandatory
Definition "The addressing information for one of this
entity's IP addresses..
INDEX {ipAdEntAddr}
::={ipAddrTable 1}
IpAddrEntry ::= SEQUENCE {
ipAdEntAddr
ipAdEntIfIndex
ipAdEntNetMask
ipAdEntBcastAddr
ipAdEntReasmMaxSize
IpAddress,
INTEGER,
IpAddress,
INTEGER,
INTEGER (0..65535)}
Aggregate Object Macro-ipAddrTable (RFC 1155)
ipAdEntAddr OBJECT-TYPE
Syntax IpAddress
Access read-only
STATUS mandatory
Definition "The IP address to which this entry's
addressing information pertains."
::={ipAddrEntry 1}
ipAdEntIfIndex OBJECT-TYPE
Syntax INTEGER
Access read-only
STATUS mandatory
Definition "The index value that uniquely identifies the
interface to which this entry is applicable. The interface identified
by a particular value of this index is the same interface as
identified by the same value of IfIndex."
INDEX {ipAdEntAddr}
::={ipAddrEntry 2}
.
.
.
.
Columnar Objects
Aggregate objects type contains one or more subtypes
each could have multiple instances, with a value associated with
each instance
It is convenient to conceptually define a tabular structure for objects
with multiple values
o e.g., IP address table
o
The objects TABLE T and ENTRY E are
logical objects
o
TABLE
T
ENTRY
E
define grouping, are not accessible
Columnar objects are objects that
represent the attributes
o
hence are accessible
Each instance of E is a row of columnar
COLUMNAR COLUMNAR COLUMNAR COLUMNAR COLUMNAR
OBJECT 1
OBJECT 4 OBJECT 5
OBJECT 2 OBJECT 3
objects 1 through 5
Multiple instances of E are represented
by multiple rows
Multiple Instance Managed Object
Columnar Objects
T
Object ID
Not accessible
{Table, Entry, Object, Index}
Row 3:
the third
instance of
the object
T.E
T.E.1.1
T.E.2.1
T.E.3.1
T.E.4.1
T.E.5.1
T.E.1.2
T.E.2.2
T.E.3.2
T.E.4.2
T.E.5.2
T.E.1.3
T.E.2.3
T.E.3.3
T.E.4.3
T.E.5.3
T.E.1.4
T.E.2.4
T.E.3.4
T.E.4.4
T.E.5.4
Example of 5 Columnar Object with 4 Instances (rows)
Notice that the column-row numeric designation is
reverse of that used in matrix representation (row-column)
Columnar Objects - Example
ipAddrTable {[Link].[Link]}
ipAddrEntry (1)
ipAdEntAddr (1)
ipAdEntIfIndex (2)
ipAdEntNetMask (3)
ipAdEntBcastAddr (4)
ipAdEntReasmMaxSize (5)
Columnar object ID of ipAdEntBcastAddr is ([Link].[Link].1.4):
iso org dod internet mgmt mib ip ipAddrTable ipAddrEntry ipAdEntBcastAddr
1 3 6
1
2 1 4
20
1
4
Columnar objects under ipAddrEntry
Row
ipAdEntAddr
ipAdEntIfIndex
IpAdEntNetMask
IpAdEntBcastAddr
IpAdEntReasmMaxSize
[Link]
[Link]
12000
[Link]
[Link]
12000
[Link]
[Link]
10000
[Link]
[Link]
15000
4 instances of the
Columnar object
Index of table
Object instances of ipAddrTable ([Link].[Link])
Columnar Objects - Example
Row
ipAdEntAddr
ipAdEntIfIndex
IpAdEntNetMask
IpAdEntBcastAddr
IpAdEntReasmMaxSize
[Link]
[Link]
12000
[Link]
[Link]
12000
[Link]
[Link]
10000
[Link]
[Link]
15000
Node 1 under
ipAddrEntry
Object instances of ipAddrTable ([Link].[Link])
Columnar Object
Object ID for
ipAddrEntry
Row #
Object Identifier
ipAdEntAddr
[Link].[Link].1.1
{[Link].[Link].[Link].3.4}
ipAdEntIfIndex
[Link].[Link].1.2
{[Link].[Link].[Link].9.25}
ipAdEntBcastAddr
[Link].[Link].1.4
{[Link].[Link].[Link].2.1}
IpAdEntReasmMaxSize
[Link].[Link].1.5
{[Link].[Link].[Link].8.138}
Object Id for specific instances
Index of the
object instance
Management Information Base
(MIB)
RFC 1213
MIB is a database containing information about
elements to be managed
For SNMP, the MIB is a structured database
(tree)
Each resource to be managed is represented by an
object
Each system (e.g., a router) maintains a MIB that
reflects the status of its managed resources
A NMS monitors/controls the resources by
reading/modifying the values of objects in the
MIB
MIB, RFC1213
Internet
{1 3 6 1}
Implementation can be
done as needed (e.g.,
objects essential for fault
or configuration
management are added)
If a group is implemented
by a vendor, all its
components are
implemented (e.g. OSPF
and all its group objects)
directory
(1)
mgmt
(2)
experimental
(3)
mib-2
(1)
system (1)
interfaces (2)
at (3)
ip (4)
icmp (5)
snmp (11)
transmission (10)
cmot (9)
egp (8)
udp (7)
tcp (6)
<module name>
<imports>
<definitions>
END
DEFINITIONS ::= BEGIN
Internet MIB-II Group
private
(4)
MIB, RFC1213
-- groups in MIB-II
RFC1213-MIB DEFINITIONS ::= BEGIN
IMPORT mgmt, NetworkAddress, IpAddress,
Counter, Gauge, TimeTicks
FROM RFC1155-SMI
OBJECT-TYPE
FROM RFC-1212;
-- This MIB module uses the extended
-- OBJET-TYPE macro as defined in [14];
--
MIB-II (same prefix as MIB-I)
mib-2
OBJECT IDENTIFIER ::= { mgmt 1 }
-- textual conventions
DisplayString ::=
OCTET STRING
-- This data type is used to model textual
-- information taken from the NVT ASCII
character -- set. By convention, objects
-- with this syntax are declared as having
--SIZE (0..255)
system
interfaces
OBJECT IDENTIFIER ::= { mib-2 1}
OBJECT IDENTIFIER ::= { mib-2 2 }
at
OBJECT IDENTIFIER ::= { mib-2 3 }
ip
OBJECT IDENTIFIER ::= { mib-2 4 }
icmp
OBJECT IDENTIFIER ::= { mib-2 5 }
tcp
OBJECT IDENTIFIER ::= { mib-2 6 }
udp
OBJECT IDENTIFIER ::= { mib-2 7 }
egp
OBJECT IDENTIFIER ::= { mib-2 8 }
cmot
OBJECT IDENTIFIER ::= { mib-2 9 }
transmission OBJECT IDENTIFIER ::= {mib-2 10}
PhysAddress ::=
OCTET STRING
-- This data type is used to model media
-----
snmp
.
.
addresses. For many types of media, this will .
.
be in a binary representation. For example,
END
an ethernet address would be represented as
a string of 6 octets.
OBJECT IDENTIFIER ::= { mib-2 11 }
MIB, System Group
-- the System group
-----
Implementation of the System group is
mandatory for all systems. If an agent is not
configured to have a value for any of these
variables, a string of length 0 is returned.
sysDescr OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-only
STATUS mandatory
DESCRIPTION
entity. ."
::= { system 1 }
"A textual description of the
system
(mib-2 1)
sysDescr (1)
sysObjectId
(2)
sysUpTime (3)
sysServices (7)
sysLocation (6)
sysName (5)
sysContact (4)
sysObjectID OBJECT-TYPE
sysUpTime OBJECT-TYPE
SYNTAX OBJECT IDENTIFIER
SYNTAX TimeTicks
ACCESS read-only
ACCESS read-only
STATUS mandatory
STATUS mandatory
DESCRIPTION "The vendor's
DESCRIPTION
authoritative identification of the network
"The time (in hundredths of
management subsystem contained in the
a
second)
since
the
network management
entity."
portion of the system was last
::= { system 2 }
reinitialized."
::= { system 3 }
MIB, System Group
Fault monitoring:
By periodically polling each agent for this value; if the current
value is less than the most recent value, then the agent has
been restarted since last poll!
Entity
sysDescr
sysObjectID
sysUpTime
sysContact
sysName
sysLocation
sysServices
OID
system 1
system 2
system 3
system 4
system 5
system 6
system 7
Description (brief)
Textual description
OBJECT IDENTIFIER of the entity
Time (in hundredths of a second since last reset)
Contact person for the node
Administrative name of the system
Physical location of the node
Value designating the layer services provided by the
entity
Programmed by vendor of
objects during
manufacturing time
MIB, Interface Group
interfaces
(mib-2 2)
It specifies the number of
interfaces in a network
component and the
managed objects
associated with each
interface
E.g., Ethernet bridge with
many network interface
cards
Implementation:
mandatory
ifNumber
(1)
ifTable
(2)
ifEntry
(1)
ifIndex (1)
ifDescr (2)
ifType (3)
ifMtu (4)
ifSpeed (5)
ifPhysAddress (6)
ifAdminstatus (7)
ifOperStatus (8)
ifLastChange (9)
ifInOctets (10)
ifInUcastPkts (11)
interfaces OBJECT IDENTIFIER ::= { mib-2 2 }
ifSpecific (22)
ifOutQLen (21)
ifOutErrors (20)
ifOutDiscards (19)
ifOutNUcastPkts (18)
ifOutUcastPkts (17)
ifOutOctets (16)
ifUnknownProtos (15)
ifInErrors (14)
ifInDiscards (13)
ifInNUcastPkts (12)
MIB, Interface Group
interfaces
(mib-2 2)
ifNumber OBJECT-TYPE
SYNTAX INTEGER
ifNumber
ifTable
ACCESS read-only
(1)
(2)
STATUS mandatory
DESCRIPTION "The number of network
interfaces (regardless of their current
ifEntry
(1)
state) present on this system."
::= { interfaces 1 }
ifEntry OBJECT-TYPE
SYNTAX IfEntry
ifTable OBJECT-TYPE
ACCESS not-accessible
SYNTAX SEQUENCE OF IfEntry
STATUS mandatory
ACCESS not-accessible
DESCRIPTION "An interface entry
STATUS mandatory
containing objects at the sub-network
layer and below for a particular
DESCRIPTION "A list of interface
interface."
entries. The number of entries is
given by the value of ifNumber."
INDEX
{ ifIndex }
::= { interfaces 2 }
::= { ifTable 1 }
IfEntry ::= SEQUENCE {ifIndex INTEGER, ifDescr DisplayString, ifType INTEGER,
ifMtu INTEGER, ifSpeed Gauge, ifPhysAddress PhysAddress, ifAdminStatus INTEGER,
ifOperStatus INTEGER, ifLastChange TimeTicks, ifInOctets Counter, }
MIB, Interface Group
Basic information useful for
network management such as
performance monitoring and
fault control
Examples
1)-measuring the queue length
or the total number of octets
into/out of the system-
indicators for detecting
congestion
2)- measuring the traffic
rate on a given interface!
ifInUcastPkts/second,
ifOutUcastPkts/second
Counter data types, always
incrementing!
interfaces
(mib-2 2)
ifNumber
(1)
ifTable
(2)
ifEntry
(1)
ifIndex (1)
ifDescr (2)
ifType (3)
ifMtu (4)
ifSpeed (5)
ifPhysAddress (6)
ifAdminstatus (7)
ifOperStatus (8)
ifLastChange (9)
ifInOctets (10)
ifInUcastPkts (11)
ifSpecific (22)
ifOutQLen (21)
ifOutErrors (20)
ifOutDiscards (19)
ifOutNUcastPkts (18)
ifOutUcastPkts (17)
ifOutOctets (16)
ifUnknownProtos (15)
ifInErrors (14)
ifInDiscards (13)
ifInNUcastPkts (12)
MIB, IP Group
ip
(mib-2 4)
Contains information
relevant to the
implementation and
operation of IP at a node
ipForwarding (1)
ipRoutingDiscards (23)
ipDefaultTTL (2)
Routers periodically
execute routing algorithms
and update routing tables
ipNetToMediaTable (22)
ipInReceives (3)
ipRouteTable (21)
ipInHdrErrors (4)
ipAddrTable (20)
ipInAddrErrors (5)
ipFragCreates (19)
ipFragFails (18)
ipForwDatagrams (6)
ipInUnknownProtos (7)
IP Address Table contains
table of IP addresses
IP Route Table contains an
entry for each route
IP Network-to-Media
Table is address
translation table
mapping IP addresses to
physical addresses
ipFragOKs (17)
ipInDiscards (8)
ipReasmFails (16)
ipInDelivers (9)
ipOutRequests(10)
ipOutDiscards (11)
ipReasmOKs (15)
ipReasmReqds (14)
ipReasmTimeout (13)
ipOutNoRoutes (12)
MIB, IP Group
ip
(mib-2 4)
Gateway or router
TTL in IP header
Total # packets
received from interfaces
# of discarded datagrams
due to header errors
ipForwarding (1)
ipRoutingDiscards (23)
ipDefaultTTL (2)
ipNetToMediaTable (22)
ipInReceives (3)
ipRouteTable (21)
ipInHdrErrors (4)
ipAddrTable (20)
ipInAddrErrors (5)
ipFragCreates (19)
ipFragFails (18)
ipForwDatagrams (6)
ipInUnknownProtos (7)
ipFragOKs (17)
ipInDiscards (8)
ipReasmFails (16)
ipInDelivers (9)
ipOutRequests(10)
ipOutDiscards (11)
ipReasmOKs (15)
ipReasmReqds (14)
ipReasmTimeout (13)
ipOutNoRoutes (12)
MIB, IP Group
ipAddrTable
(ip 20)
ipAddrEntry
(ipAddrTable 1)
ipAdEntReasmMaxSize (5)
ipAdEntAddr (1)
ipAdEntIfIndex (2)
ipAdEntBcastAddr (4)
ipAdEntNetMask
(3)
Entity
ipAddrTable
ipAddrEntry
OID
ip 20
IpAddrTable 1
ipAdEntAddr
IpAddrEntry 1
ipAdEntIfIndex
IpAddrEntry 2
ipAdEntNetMask
IpAddrEntry 3
ipAdEntBcastAddr
ipAdEntReasmMaxSize
IpAddrEntry 4
IpAddrEntry 5
Description (brief)
Table of IP addresses
One of the entries in the IP address
table
The IP address to which this entry's
addressing information pertains
Index value of the entry, same as
ifIndex
Subnet mask for the IP address of
the entry
Broadcast address indicator bit
Largest IP datagram that can be
reassembled on this interface
MIB, IP Group
Contains information used for
Internet routing
ipRouteTable information is
useful for: configuration
monitoring, controlling the
routing process as well as fault
isolation
ipRouteTable
(ip 21)
ipRouteEntry
ipRouteTable (1)
ipRouteDest (1)
ipRouteInfo (13)
ipRouteMetric5
ipRouteIfIndex (2)
(12)
ipRouteMetric1 (3)
ipRouteMask 11)
ipRouteMetric2 (4)
ipRouteAge (10)
ipRouteMetric3 (5)
ipRouteProto (9)
ipRouteMetric4 (6)
ipRouteType (8)
ipRouteNextHop (7)
MIB, TCP Group
Contains info. relevant to the implementation/operation of
connection-oriented TCP
Timeout algorithm for retransmission
tcp
(mib-2 6)
tcpOutRsts (15)
tcpRtoAlgorithm (1)
tcpInErrors (14)
tcpRtoMin (2)
tcpConnTable 13)
tcpRtoMax (3)
tcpRetranSegs (12)
tcpMaxConn (4)
tcpOutSegs (11)
tcpActiveOpens (5)
tcpPassiveOpens (6)
tcpInSegs (10)
Minimum value for
tcpAttemptFails (7)
tcpCurrEstab (9)
retransmission timer
tcpEstabResets (8)
# segments
retransmitted
Maximum value for
retransmission timer
Maximum nb of
TCP connections
# segments
received
# segments
sent
MIB, TCP Group
tcpConnTable
(tcp 13)
tcpConnEntry
(1)
tcpConnState (1)
tcpConnLocalAddress (2)
tcpCommRemPort (5)
tcpConnRemAddress(4)
tcpConnLocalPort (3)
SNMP Network Management
Organization Model
Communication Model
Information Model
Structure
of
Management
Information (SMI)
Managed Objects
Management
Information
Base
(MIB)
SNMP Administrative Model
SNMP Protocol Specs
SNMPv1 Administrator Model
SNMP Entities:
SNMP application entities
Reside in management
stations and network
elements
Manager and agent
Pairing of both entities
forms SNMP community
Administrative model
defines administrative
relationship between
communicating entities
Management stations, each
manages all or a subset of
the managed stations in
the configuration
o
SNMP protocol entities
Communication processes
(PDU handlers)
Peer processes that support
application entities
Subsets may overlap
Each managed station
controls its local MIB
o
control the use of MIB by
a number of management
stations
SNMPv1 Administrator Model
SNMP Community
It is a relation:
between one SNMP
agent and a set of
managers
defines authentication,
access control and
proxy charct.
SNMP Manager
SNMP Manager
SNMP Manager
Authentication Scheme
Authentication Scheme
Authentication Scheme
Authentic Messages
Authentication Scheme
SNMP Agent
Multiple pairs can belong to the same community
A community name is a string of octets
Two application entities in the same community can
communicate with each other
This essentially defines a filter module or authentication
scheme between manager and agent
Security in SNMPv1 is therefore community-based
no encryption
SNMPv1 Administrator Model
SNMP Community Profile
only get, and trap are
performed on objects 2,3,4
READONLY
READWRITE
read-only
write-only
read-write
Object 1
Object 2
Object 3
Object 4
SNMP access mode
SNMP Access Mode
not-accessible
Community profile: MIB view +
Operations such as get, set and trap
can be performed on objects 2,3,4
SNMP Agent
SNMP MIB View
Operations on an object is
MIB View: a subset of the managed
objects an agent is permitted to
manage/view
A community name is also assigned
an SNMP access mode
READ ONLY, READ-WRITE
MIB Access
determined by community profile
and the access mode of the
object
o Total of four access privileges
Read-only, write-only, readwrite, not-accessible
Some objects, such as table and
table entry, are non-accessible
SNMPv1 Administrator Model
SNMP Access Policy
Manager
Community
Agent 1
Community Profile 1
Community Profile 2
Agent 2
Pair of SNMP community and community profile define SNMP
access policy
Access policy allow a managed agent to give different access privileges to
different managers
Manager manages network components of communities 1 and 2 via
Agents 1 and 2
Agent 1 has only view of Community Profile 1, e.g. Cisco components
Agent 2 has only view of Community Profile 2, e.g. 3Com components
Manager has total view of both Cisco and 3Com components
SNMPv1 Administrator Model
SNMP Access Policy
Manager 1
(Community 1)
Manager 1 manages
community 1, manager 2
community 2,and manager
3 (MoM) both
communities 1 and 2
Community 1
Agent 1
Community Profile 1
Community Profile 2
Agent 2
Example: Enterprise
management
Manager 3
(Community 1, Community 2)
Community 2
Agent 3
Community Profile 3
Community Profile 4
Manager 2
(Community 2)
Agent 4
SNMPv1 Administrator Model
Proxy agent enables non-
SNMP Proxy Access Policy
SNMP community
elements to be managed
by an SNMP manager
An SNMP MIB is
created to handle the
non-SNMP objects
SNMP Manager
(Community 1)
SNMP
Agent
Proxy Agent
SNMP Community
non-SNMP
Community
SNMP Network Management
Organization Model
Communication Model
Information Model
Structure
of
Management
Information (SMI)
Managed Objects
Management
Information
Base
(MIB)
SNMP Administrative Model
SNMP Protocol Specs
Message Format
version
community
Protocol entities support
application entities
Communication between
remote peer processes
Message consists of :
Version identifier
Community name
Protocol Data Unit
Message encapsulated in UDP
datagrams and transmitted
data
Like FTP, SNMP uses two well-
known ports to operate:
UDP Port 161 - SNMP
Messages
UDP Port 162 - SNMP Trap
Messages
Message Format
version
community
data
SNMP message format is defined using ASN.1,
encoded for transmission over UDP using BER
Message ::= SEQUENCE {
version
INTEGER {version-1(0)},
community OCTET STRING,
data
PDUs
}
3 different versions:
SNMPv1, SNMPv2, SNMPv3
Message Format-Set/Get PDU
version
community
data
Message ::= SEQUENCE {
version
INTEGER {version-1(0)},
community OCTET STRING,
data
PDUs
}
PDUs::= CHOICE {
get-request
[0] IMPLICIT PDU,
get-next-request [1] IMPLICIT PDU,
get-response
[2] IMPLICIT PDU,
set-request
[3] IMPLICIT PDU,
trap
[4] IMPLICIT Trap-PDU
}
Message Format-Set/Get PDU
PDUtype
requestid
errorstatus
errorindex
PDU ::= SEQUENCE {
request-id
INTEGER,
error-status
INTEGER {
noError
(0),
tooBig
(1),
noSuchName(2),
badValue (3),
readOnly (4),
genErr
(5)
},
error-index
INTEGER,
variable-bindings VarBindList
}
variable-bindings
request-id:
track a message and
indicate loss of a message
(e.g., timeout, etc.)
error-status: indicate the
occurrence of error
error-index: indicate the
occurrence of error (position
in the list of variables)
variable-bindings: grouping of
number of operations in a
single message:
e.g., one request to get all
values and one response listing
all values
Message Format-variable bindings
var-bind 1
name
value
VarBindList
var-bind 2
name
value
...
::= SEQUENCE OF VarBind
VarBind
::= SEQUENCE {
name ObjectName,
value ObjectSyntax
}
ObjectName
::= OBJECT IDENTIFIER
ObjectSyntax ::= CHOICE {
simple
SimpleSyntax,
application-wide ApplicationSyntax
}
var-bind n
name
value
Message Format-variable bindings
SimpleSyntax ::= CHOICE {
number INTEGER,
string OCTET STRING,
object OBJECT IDENTIFIER,
empty NULL
}
ApplicationSyntax::= CHOICE {
address
NetworkAddress,
counter
Counter,
gauge
Gauge,
ticks
TimeTicks,
arbitrary Opaque
}
NetworkAddress::= CHOICE {
internet IpAddress
}
Message Format-Trap PDU
PDUAgent
Generic
Specific
Entreprise
type
Address Trap Type Trap Type
Time
Stamp
variable-bindings
Trap-PDU ::= SEQUENCE {
- Pertain to the system generating
enterprise
OBJECT IDENTIFIER, the trap (sysObjectID)
agent-addr
NetworkAddress,
-IP address of the objetc
generic-trap
INTEGER {
coldStart
(0),
warmStart
(1),
linkDown
(2),
linkUp
(3),
authenticationFailure(4),
egpNeighborLoss
(5),
enterpriseSpecific
(6)
},
Specific code to identify the
specific-trap
INTEGER,
trap cause
time-stamp
TimeTicks,
Elapsed time since last re-initialization
variable-bindings VarBindList
}
