Lab Exercise - Introduction to Network Management. Objective of the exercise

Transcription

1 Lab Exercise - Introduction to Network Management Objective of the exercise Introduce students to the basics of managing network resources, ie devices that are connected to the computer network. Theoretical basis To enable businesses to run smoothly using the network infrastructure necessary to manage network resources. To manage network resources it is necessary: - To keep track of whether the equipment is functioning properly (Fault Management) - To manage configurations specific devices and the entire system (Configuration Management) - To keep track of usage of a specific resource (Accounting management) - To monitor network performance and network devices (Performance management) - To manage and manage security of network devices (Security Management) Using the Simple Network Management Protocol (SNMP) can manage the Fault, Configuration, Accounting, Performance, Security (FCAPS) network devices that support SNMP protocol ie have installed SNMP agents and who have a local Management information Base (MIB) in which it is possible to find relevant information that can be used to manage network resources. SNMP agents can to support the management and monitoring (monitoring of) not only the network parameters for a specific device and a specific program or database. SNMP protocol uses the UDP transport protocol to transfer data from the device operated on the Network Management Station (NMS), which is a central place where you can manage the network and network devices as shown in the figure below. MIB SNMP poll MIB One of the first steps that you need to make to manage network devices is to provide work or SNMP agent installed on the devices you want to monitor and govern.

2 Installing SNMP Agent on Windows operating systems It is necessary to start from the menu select Control Panel and click on the Add / Remove Programs and select Add / Remove Windows Components After which it opens a window where you should be positioned at Management and Monitoring Tools, as shown in the figure below and click on Details.

3 After the window opens, as shown below where it needs to be turned on Simple Network Management Protocol as shown in the picture below. Click OK, then Next and Finish after the installation is completed. Close the Control Panel, this completes the installation of the SNMP agent on the windows one hundred ribbons omogućva NMS to access the local MIB-based supervised machine. In order to ensure that only privileged system users (administrators ) Can in this way to manage the resources necessary to konfigursati SNMP agent as described below. Configure the community name in the SNMP agent on a Windows operating system From the Start menu must choose Control Panel, and then need to choose Administrative Tools, and then opens a window where you should choose Services. In the Serivices need to find SNMP Service (Service) and right click and choose Properties, as shown in the figure below.

4 After which it opens a window where to choose the Security tab, as shown in the figure below, and on the button Add (or Edit) to add / change the value so that it is as shown in the figure below. Community needs to know the name only to authorized persons, because knowing the community name catty visitor may be misused hanged data on system Rights should be left to READ-ONLY to prevent changes to the computer via SNMP Using special tools that can be accessed any MIB based network device that can switch, router, PC, server or other device. One of the tools available for monitoring network is ireasoning MIB browser which can be used to view the MIB data (instances) in a network device or adjusting certain values. Configure the community name in the SNMP agent on the router / switch-in It is necessary to configure SNMP community name on a Cisco router, switch to using the command in configuration mode: snmp-server community RO etfvjezbe

5 ireasoning MIB browser IReasoning MIB browser tool available at On user workstations this program is already installed, so it is only necessary to run. Is triggered by double-clicking the icon located on the desktop. After the window opens, as shown in the figure below.

6 Some of the controls are represented in Figure below. Address of the device whose instances you want to access Starting selected commands the Object identifier (Object ID - OID) Selection of MIB instance Command Deletion of the data contained in the array Values Setting ireasoning MIB Browser Program ireasoning MIB browser is required before use to configure the network. In order to make the necessary basic configuration from the Tools menu, select Options as shown in the figure below.

7 After the window opens, as shown below. It is necessary to enter the SNMP community name that is used on the network to be managed. During the exercises will be utilized etfvjezbe community name. Reading values from a MIB Described above konfiurisanje ireasoning MIB Browser is enough to gain access to the computer on which it was already installed and configured the SNMP agent and the data stored in the MIB database. First you need the MIB Browser to determine the most varibala read from a particular device as shown in the figure below to open the MIB-2 tree. You need to click on the +

8 MIB-2 You need to click on the + to get the OID that is under system

9 You need to click on the sysdescr Instance name OID instance Instance descritpion

10 Instance name and value Starting command Delete read values from ireasoning Browser Exercises Using Desr field that describes what that variable is a need očitiati following values - The number of received ICMP echo requires (a large number may indicate a DoS attack): - Total number of SNMP requires insiders this device - Using chunks instead Get Get Next commands go through the table for the interface (IfTable) and - Specify the type of interface - The size of the MTU (Maximum Transmission Unit) - Using pieces Get Next command in IP table read values (you can see all the IP addresses that are assigned to the device): - - IP addresses that are configured on the device Get Next using pieces from the routing table read routes (identified wrong route):,,,,,,