9780201485349

As the most effective set of automated tools for managing today's highly diverse, multivendor systems, SNMP (Simple Network Management Protocol), along with the RMON (Remote Network Monitoring) technology, is recognized as the de facto standard in the field of network management. This book is the definitive guide to SNMP-based network and internetwork management for network administrators, managers, and designers. Concise, focusing on practical issues, and completely up to date, it covers SNMPv1, SNMPv2, and the most recent SNMPv3, as well as RMON1 and RMON2--all of which are currently deployed in today's LANs and WANs. With this book, you will be better equipped to determine your network management needs, gain insight into design issues, and obtain the necessary understanding to evaluate available SNMP-based products. The author presents helpful background information, including an overview of network management requirements and an explanation of fundamentals such as network management architecture; performance, fault, and accounting monitoring; and configuration and security control. You will also find detailed information on the specific protocols and operation of SNMPv1 and the enhancements made in SNMPv2 and SNMPv3, focusing in particular on this latest version's security features-message authentication code and encryption, USM (User-Based Security Model), and VACM (View-Based Access Control Model). The book provides an extensive discussion on standard MIBs (Management Information Bases), including MIB-II and the Ethernet Interface MIB. In addition, this third edition presents RMON1 and the RMON2 enhancements, looking at statistics collection, alarms, and filters. Throughout, the book highlights practical issues of network design, SNMP implementation, and daily operation. To manage today's complex, multivendor network environments effectively and to plan intelligently for the future, you will need a thorough grasp of network management technology and standards. This comprehensive book will serve as your guide. 0201485346B04062001

William Stallings is a consultant, lecturer, and author of over a dozen professional reference books and textbooks on data communications and computer networking. His clients have included major corporations and government agencies in the United States and Europe. Three times he has received the Best Computer Science Textbook of the Year award from the Text and Academic Authors Association. Dr. Stallings has designed and implemented both TCP/IP-based and OSI-based protocol suites on a variety of computers and operating systems. He has a Ph.D. in computer science from the Massachusetts Institute of Technology. His cyberspace address is http://www.shore.net/~ws.

0201485346AB04062001

Preface

xiii

(2)

Acknowledgments

xv

Chapter 1 Introduction

1

(22)

1.1 Network Management Requirements

2

(4)

1.2 Network Management Systems

6

(9)

1.3 Outline of the Book

15

(4)

APPENDIX 1A Internet Resources

19

(4)

PART I Network Management Fundamentals

23

(48)

Chapter 2 Network Monitoring

23

(32)

2.1 Network Monitoring Architecture

23

(6)

2.2 Performance Monitoring

29

(12)

2.3 Fault Monitoring

41

(3)

2.4 Accounting Monitoring

44

(1)

2.5 Summary

45

(1)

APPENDIX 2A Queueing Theory Concepts

46

(6)

APPENDIX 2B Statistical Analysis Concepts

52

(3)

Chapter 3 Network Control

55

(16)

3.1 Configuration Control

55

(4)

3.2 Security Control

59

(8)

3.3 Summary

67

(4)

PART II SNMPv1

71

(138)

Chapter 4 SNMP Network Management Concepts

71

(14)

4.1 Background

71

(4)

4.2 Basic Concepts

75

(8)

4.3 Summary

83

(2)

Chapter 5 SNMP Management Information

85

(36)

5.1 Structure of Mangement Information

86

(16)

5.2 Practical Issues

102

(12)

5.3 Summary

114

(2)

APPENDIX 5A TCP Connections States

116

(5)

Chapter 6 Standard MIBs

121

(42)

6.1 MIB-II

121

(25)

6.2 Ethernet Interface MIB

146

(11)

6.3 Summary

157

(1)

APPENDIX 6A Case Diagrams

158

(1)

APPENDIX 6B IP Addressing

159

(4)

Chapter 7 Simple Network Management Protocol

163

(46)

7.1 Basic Concepts

163

(10)

7.2 Protocol Specification

173

(17)

7.3 Transport-Level Support

190

(2)

7.4 SNMP Group

192

(1)

7.5 Practical Issues

192

(10)

7.6 Summary

202

(2)

APPENDIX 7A Lexicographical Ordering

204

(5)

PART III RMON

209

(122)

Chapter 8 Remote Network Monitoring: Statistics Collection

209

(42)

8.1 Basic Concepts

209

(13)

8.2 statistics Group

222

(3)

8.3 history Group

225

(3)

8.4 host Group

228

(6)

8.5 hostTopN Group

234

(4)

8.6 matrix Group

238

(3)

8.7 tokenRing Extensions to RMON

241

(7)

8.8 Summary

248

(1)

APPENDIX 8A EntryStatus Textual Convention

249

(2)

Chapter 9 Remote Network Monitoring: Alarms and Filters

251

(26)

9.1 alarm Group

251

(5)

9.2 filter Group

256

(10)

9.3 Packet capture Group

266

(5)

9.4 event Group

271

(2)

9.5 Practical Issues

273

(3)

9.6 Summary

276

(1)

Chapter 10 RMON2

277

(54)

10.1 Overview

277

(10)

10.2 Protocol Directory Group

287

(6)

10.3 Protocol Distribution Group

293

(5)

10.4 Address Map Group

298

(2)

10.5 RMON2 Host Groups

300

(5)

10.6 RMON2 Matrix Groups

305

(10)

10.7 User History Collection Group

315

(5)

10.8 Probe Configuration Group

320

(4)

10.9 Extensions to RMON1 for RMON2 Devices

324

(2)

10.10 Practical Issues

326

(2)

10.11 Summary

328

(3)

PART IV SNMPv2

331

(96)

Chapter 11 SNMPv2: Management Information

331

(34)

11.1 Background

331

(4)

11.2 Structure of Management Information

335

(22)

11.3 Summary

357

(1)

APPENDIX 11A Row-Status Textual Convention

358

(7)

Chapter 12 SNMPv2: Protocol

365

(34)

12.1 Protocol Operations

365

(27)

12.2 Transport Mappings

392

(1)

12.3 Coexistence with SNMPv1

392

(6)

12.4 Summary

398

(1)

Chapter 13 SNMPv2: MIBs and Conformance

399

(28)

13.1 SNMPv2 Management Information Base

399

(6)

13.2 Conformance Statements

405

(8)

13.3 Evolution of the Interfaces Group of MIB-II

413

(9)

13.4 Summary

422

(2)

APPENDIX 13A TestAndIncr Textual Convention

424

(3)

PART V SNMPv3

427

(122)

Chapter 14 Cryptographic Algorithms in SNMPv3

427

(20)

14.1 Conventional Encryption with DES

427

(6)

14.2 The MD5 Secure Hash Function

433

(5)

14.3 The SHA-1 Secure Hash Function

438

(1)

14.4 Message Authentication with HMAC

439

(8)

Chapter 15 SNMPv3: Architecture and Applications

447

(42)

15.1 Background

447

(3)

15.2 SNMPv3 Overview

450

(5)

15.3 SNMP Architecture

455

(15)

15.4 SNMPv3 Applications

470

(3)

15.5 MIBs for SNMPv3 Applications

473

(10)

15.6 Summary

483

(2)

APPENDIX 15A Textual Conventions for the SNMP Management Architecture

485

(4)

Chapter 16 SNMPv3: Message Processing and User-Based Security Model

489

(36)

16.1 Message Processing

489

(9)

16.2 The SNMPv3 User-Based Security Model

498

(26)

16.3 Summary

524

(1)

Chapter 17 SNMPv3: View-Based Access Control Model

525

(24)

17.1 The VACM Model

525

(5)

17.2 Access Control Processing

530

(5)

17.3 The VACM MIB

535

(8)

17.4 Summary

543

(1)

APPENDIX 17A The Use of Subtrees and Masks

544

(5)

APPENDICES

549

(48)

Appendix A The TCP/IP Protocol Suite

549

(12)

A.1 Operation of TCP and IP

552

(1)

A.2 The TCP/IP Layers

553

(3)

A.3 TCP/IP Applications

556

(1)

A.4 User Datagram Protocol

557

(1)

A.5 TCP/IP Standards

558

(3)

Appendix B Abstract Syntax Notation One

561

(36)

B.1 Abstract Syntax

561

(3)

B.2 ASN.1 Concepts

564

(14)

B.3 ASN.1 Macro Definitions

578

(8)

B.4 Basic Encoding Rules

586

(8)

B.5 Alternative Encoding Rules

594

(3)

Glossary

597

(6)

References

603

(2)

Index

605

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

The relentless growth in the information processing needs of organizations has been accompanied by rapid development in computer and data networking technology to support those needs, and an explosion in the variety of equipment and networks offered by vendors. Gone are the days when an organization would rely on a single vendor and a relatively straightforward architecture to support its needs. The world is no longer divided into the pure mainframe-based, IBM-compatible centralized environment and the PC-based, single-LAN-type, distributed environment. Today's typical organization has a large and growing but amorphous architecture, with a variety of local area networks (LANs) and wide area networks (WANs), supported by bridges and routers, and a variety of distributed computing services and devices, including PCs, workstations, and servers. And, of course, despite over two decades of premature eulogies, the mainframe lives on in countless distributed and a few centralized configurations.To manage these systems and networks, which continue to grow in scale and diversity, a rich set of automated network management tools and applications is needed. Fundamental to the operation of such tools and applications in a multivendor environment are standardized techniques for representing and exchanging information relating to network management.In response to these needs, managers and users have turned overwhelmingly to one standard: SNMP and the related RMON specification. SNMP (Simple Network Management Protocol) was initially specified in the late 1980s and quickly became the standard means for multivendor network management. However, SNMP was too limited to meet all critical network management needs. Three enhancements have solidified the role of SNMP as the indispensable network management tool. First the RMON (Remote Network Monitoring) specification, which is built on SNMP, was released in 1991. RMON was revised in 1995, and an enhancement to RMON, known as RMON2, was issued in 1997. RMON defines algorithms and databases for managing remote LANs. Second, an enhanced version of SNMP, known as SNMPv2, was released in 1993 and revised in 1995. SNMPv2 provides more functionality and greater efficiency than in the original version of SNMP. Finally, SNMPv3 was issued in 1998. SNMPv3 defines an overall framework for present and future versions of SNMP and adds security features to SNMP. This book covers the latest versions of SNMPv1, SNMPv2, and RMON 1 and 2, as well as the new SNMPv3. All these versions are in active use. ObjectiveTo manage today's systems effectively and to plan intelligently for the future use of network management systems, the systems manager needs an understanding of the technology of network management and a thorough grasp of the details of the existing and evolving standards. This book's objective is to fill that need.This book provides a comprehensive introduction to SNMP-based network and internetwork management. Part I of the book is a survey of network management technology and techniques, to enable the reader to place the various vendor offerings into the context of his or her requirements. Part II presents the original SNMP family of standards, which is still the most widely deployed version. Part III looks at the revised version of RMON1, plus RMON2, which extends RMON functionality. Part IV examines SNMPv2, which provides expanded functionality to SNMP. Part V of the book examines SNMPv3, which provides security features for use with SNMPv1 or SNMPv2. Throughout, practical issues related to the use of these standards, and products based on these standards, are examined. Intended AudienceThis book is intended for a broad range of readers interested in network management, including: Students and professionals in data processing and data communications: This book is intended as a basic tutorial and reference source for this exciting ar

Amazon no longer offers textbook rentals. We do!

SNMP, SNMPv2, SNMPv3, and RMON 1 and 2

SNMP, SNMPv2, SNMPv3, and RMON 1 and 2

0201485346

Summary

Author Biography

Table of Contents

Supplemental Materials

Excerpts