FazBrowse Wikipedia Viewer | Main Page |
Search Wikipedia:
|
Viewing: https://en.wikipedia.org/wiki/Simple_Network_Management_Protocol

Simple Network Management Protocol

Contents
Management information base
Protocol details
    SNMPv1 and SNMPv2c interoperability
External links

SNMPv3 STD0062
Communication protocol
OSI layerApplication
Ports161, 162 (Trap)
RFC3411–3418

Simple Network Management Protocol (SNMP) is an Internet Standard protocol for collecting and organizing information about managed devices on IP networks and for modifying that information to change device behavior. Devices that typically support SNMP include cable modems, routers, network switches, servers, workstations, printers, and more.

SNMP is widely used in network management for network monitoring. SNMP exposes management data in the form of variables on the managed systems organized in a management information base (MIB), which describes the system status and configuration. These variables can then be remotely queried (and, in some circumstances, manipulated) by network management applications.

Three significant versions of SNMP have been developed and deployed. SNMPv1 is the original version of the protocol. More recent versions, SNMPv2c and SNMPv3, feature improvements in performance, flexibility and security.

SNMP is a component of the Internet Protocol Suite as defined by the Internet Engineering Task Force (IETF). It consists of a set of standards for network management, including an application layer protocol, a database schema, and a set of data objects.

 software that runs on the manager

A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers.

An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form.

A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network.

Management information base

edit

SNMP agents expose management data on the managed systems as variables. The protocol also permits active management tasks, such as configuration changes, through remote modification of these variables. The variables accessible via SNMP are organized in hierarchies. SNMP itself does not define which variables a managed system should offer. Rather, SNMP uses an extensible design that allows applications to define their own hierarchies. These hierarchies are described as a management information base (MIB). MIBs describe the structure of the management data of a device subsystem; they use a hierarchical namespace containing object identifiers (OID). Each OID identifies a variable that can be read or set via SNMP. MIBs use the notation defined by Structure of Management Information Version 2.0 (SMIv2, RFC 2578), a subset of ASN.1.

Protocol details

edit

SNMP operates in the application layer of the Internet protocol suite. All SNMP messages are transported via User Datagram Protocol (UDP). The SNMP agent receives requests on UDP port 161. The manager may send requests from any available source port to port 161 in the agent. The agent response is sent back to the source port on the manager. The manager receives notifications (Traps and InformRequests) on port 162. The agent may generate notifications from any available port. When used with Transport Layer Security or Datagram Transport Layer Security, requests are received on port 10161 and notifications are sent to port 10162.

SNMPv1 specifies five core protocol data units (PDUs). Two other PDUs, GetBulkRequest and InformRequest were added in SNMPv2 and the Report PDU was added in SNMPv3. All SNMP PDUs are constructed as follows:

IP header UDP header version community PDU-type request-id error-status error-index variable bindings

The seven SNMP PDU types, as identified by the PDU-type field, are as follows:

GetRequest
A manager-to-agent request to retrieve the value of a variable or list of variables. Desired variables are specified in variable bindings (the value field is not used). Retrieval of the specified variable values is to be done as an atomic operation by the agent. A Response with current values is returned.
SetRequest
A manager-to-agent request to change the value of a variable or list of variables. Variable bindings are specified in the body of the request. Changes to all specified variables are to be made as an atomic operation by the agent. A Response with (current) new values for the variables is returned.
GetNextRequest
A manager-to-agent request to discover available variables and their values. Returns a Response with variable binding for the lexicographically next variable in the MIB. The entire MIB of an agent can be walked by iterative application of GetNextRequest starting at OID 0. Rows of a table can be read by specifying column OIDs in the variable bindings of the request.
GetBulkRequest
A manager-to-agent request for multiple iterations of GetNextRequest. An optimized version of GetNextRequest. Returns a Response with multiple variable bindings walked from the variable binding or bindings in the request. PDU specific non-repeaters and max-repetitions fields are used to control response behavior. GetBulkRequest was introduced in SNMPv2.
Response
Returns variable bindings and acknowledgement from agent to manager for GetRequest, SetRequest, GetNextRequest, GetBulkRequest and InformRequest. Error reporting is provided by error-status and error-index fields. Although it was used as a response to both gets and sets, this PDU was called GetResponse in SNMPv1.
Trap
Asynchronous notification from agent to manager. While in other SNMP communication, the manager actively requests information from the agent, these are PDUs that are sent from the agent to the manager without being explicitly requested. SNMP Traps enable an agent to notify the management station of significant events by way of an unsolicited SNMP message. Trap PDUs include current sysUpTime value, an OID identifying the type of trap and optional variable bindings. Destination addressing for traps is determined in an application-specific manner, typically through trap configuration variables in the MIB. The format of the trap message was changed in SNMPv2 and the PDU was renamed SNMPv2-Trap.
RFC 1065 — Structure and identification of management information for TCP/IP-based internets
  • RFC 1155 — Structure and identification of management information for TCP/IP-based internets
  • RFC 1156 (MIB-1) was replaced by the more often used:

    • RFC 1452, revises version 1 and includes improvements in the areas of performance, security and manager-to-manager communications. It introduced GetBulkRequest, an alternative to iterative GetNextRequests for retrieving large amounts of management data in a single request. The new party-based security system introduced in SNMPv2, viewed by many as overly complex, was not widely adopted. This version of SNMP reached the Proposed Standard level of maturity, but was deemed obsolete by later versions.

      Community-Based Simple Network Management Protocol version 2, or SNMPv2c, is defined in 4294967295). A 32-bit version 1 counter cannot store the maximum speed of a 10-gigabit or larger interface, expressed in bits per second. Similarly, a 32-bit counter tracking statistics for a 10-gigabit or larger interface can roll over back to zero again in less than one minute, which may be a shorter time interval than a counter is polled to read its current state. This would result in lost or invalid data due to the undetected value rollover and corruption of trend-tracking data.

      The 64-bit version 2 counter can store values from zero to 18.4 quintillion (precisely 18,446,744,073,709,551,615) and so is currently unlikely to experience a counter rollover between polling events. For example, 1.6 terabit Ethernet is predicted to become available by 2025. A 64-bit counter incrementing at a rate of 1.6 trillion bits per second would be able to retain information for such an interface without rolling over for 133 days.

      SNMPv1 and SNMPv2c interoperability

      edit

      SNMPv2c is incompatible with SNMPv1 in two key areas: message formats and protocol operations. SNMPv2c messages use a different header and different protocol data unit (PDU) formats than SNMPv1 messages. SNMPv2c also uses two protocol operations that are not specified in SNMPv1. To overcome incompatibility, RFC 3411

      The security deficiencies of all SNMP versions can be mitigated by IPsec authentication and confidentiality mechanisms.Douglas R. Mauro & Kevin J. Schmidt. (2001). Essential SNMP (1st ed.). Sebastopol, CA: O'Reilly & Associates.

    • R. Presuhn, ed. (December 2002). Version 2 of the Protocol Operations for the Simple Network Management Protocol (SNMP). Network Working Group. doi:10.17487/RFC3416. RFC 3416. Proposed Standard. Obsoletes RFC 1098. Each variable assignment specified by the SetRequest-PDU should be effected as if simultaneously set with respect to all other assignments specified in the same message.
    • "SNMP Inform Requests". Cisco. Retrieved 2011-12-09.
    • Douglas Mauro; Kevin Schmidt (2005). Information Security Management Handbook, Sixth EditioEssential SNMP: Help for System and Network Administrators. O'Reilly Media, Inc. pp. 21–22. ISBN 9780596552770.
    • 1 2 3 Wiley, John (2015-12-01). Engineering Information Security: The Application of Systems Engineering Concepts to Achieve Information Assurance. John Wiley & Sons. p. 366. ISBN 9781119104711. Retrieved 2017-09-14.
    • 1 2 "RFC Search Detail: Standards Track snmpv2 RFCs". The RFC Editor. Retrieved 2014-02-24.
    • ISSN 1060-6084
    • RFC 7860
    • "SNMP Version 3". Institute of Operating Systems and Computer Networks. Retrieved 2010-05-07.
    • RFC Editor Archived 2007-10-29 at the Wayback Machine List of current Internet Standards (STDs)
    • CERT Advisory CA-2002-03 Multiple Vulnerabilities in Many Implementations
    • 1 2 3 4 HMAC-SHA-2 Authentication Protocols in the User-based Security Model (USM) for SNMPv3. IETF. RFC 7630.
    • RFC 1155 (STD 16) Structure and Identification of Management Information for the TCP/IP-based Internets
    • RFC 1213 (STD 17) Management Information Base for Network Management of TCP/IP-based internets: MIB-II
    • RFC 1901 (Experimental) Introduction to Community-based SNMPv2
    • RFC 1908 (Standards Track) Coexistence between Version 1 and Version 2 of the Internet-standard Network Management Framework
    • RFC 2578 (STD 58) Structure of Management Information Version 2 (SMIv2)
    • RFC 3412 Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)
    • RFC 3415 View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)
    • RFC 3418 Management Information Base (MIB) for the Simple Network Management Protocol (SNMP)
  • RFC 3826 (Proposed) The Advanced Encryption Standard (AES) Cipher Algorithm in the SNMP User-based Security Model
  • RFC 5590 (STD 78) Transport Subsystem for the Simple Network Management Protocol (SNMP)
  • RFC 5608 (Proposed)  Remote Authentication Dial-In User Service (RADIUS) Usage for Simple Network Management Protocol (SNMP) Transport Models.
  • RFC 7860 (Proposed) HMAC-SHA-2 Authentication Protocols in User-Based Security Model (USM) for SNMPv3
  • External links

    edit
    Wikiversity has learning resources about Simple Network Management Protocol
    National
    Other

    View original on Wikipedia | Back | FazBrowse Home