SNMP-based instance Management

1) SNMP is the most widely used Network Management Protocol on the network. It is widely accepted and used to ensure that management information is transmitted between any two points in the network, it is convenient for network administrators to modify information and locate faults on any node of the network. It adopts the polling mechanism and is most suitable for small and fast network environments, therefore, you can achieve the accessibility of many products and devices.
2) SNMP working mechanism: SNMP is divided into two parts: nms and agent. NMS is called the network management station. Currently, Huawei's QuidView is commonly used. IBM Netview and so on, but these are resources that are not available on the network. Agents are server software running on network devices. When a device encounters an exception, they send Trap packets to NMS, the communication diagram between the two is as follows: 650) this. width = 650; "style =" width: 592px; height: 194px "title =" 2013-08-27_130940.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532564W8-0.png "Width =" 582 "height =" 314 "/> 3) because the network management station cannot download the actual application, we can only use other software to implement the experiment, simulate What's _ up_Gold_v8.01, which can be downloaded from the Internet. Here, the download link a is not provided. experimental Device: H3C firewall, two simulated routers) Huawei S2000 switch, one of which is installed with management software as NMS. Another pc is built with a web server, and the snmp service must be enabled. B. Topology 650) this. width = 650; "style =" width: 667px; height: 290px "title =" 2013-08-27_124639.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325623S-1.png "Width =" 652 "height =" 412 "/> c. experiment configuration pc1 configure ip 192.168.2.200 subnet mask 255.255.0pc2 configure ip 192.168.4.200 subnet mask 255.255.255.0 firewall 1 Change name to fw-1) <H3C> system-view [H3C] sysname fw-1 // change name fw-1 [fw-1] int eth0/0 // enter port [fw-1-Ethernet0/0] ip add 192.168.2.1 24 // configure ip Address [fw-1-Ethernet0/0] int eth0/4 // access WAN Interface [fw-1-Ethernet0/4] ip add 192.168.3.1 24 // configure wan interface ip [fw-1-Ethernet0/4] quit [fw-1] ip route -static 192.168.4.0 24 192.168.3.2 // configure the route to the 192.168.4.0 CIDR Block [fw-1] ping 192.168.2.200 // test whether the PING can communicate with the NMS host 192.168.2.200: 56 data bytes, press CTRL_C to break Reply from 192.168.2.200: bytes = 56 Sequence = 1 ttl = 128 time = 14 ms omitted part of the test display information) [fw-1] firewall zone untrust // enter firewall area firewall port needs to join area) [fw-1-zone-untrust] add interface eth0/4 // port join region [fw-2-zone-untrust] add interface eth0/0 [fw-1-zone-untrust] quit [fw-1] snmp-agent // device Enable snmp Service [fw-1] snmp-agent community read public // set public as group name and read-only access permission [fw-1] snmp-agent community write private // set private as group name and writable access permission [fw-1] snmp-agent sys-info contact zhangsan // sets system maintenance contact information [fw-1] snmp-agent sys-info location jifang-1 // sets the physical location of system management [fw-1] snmp-agent sys-info version all // sets a version acceptable to the system [fw-1] snmp-agent trap enable // enables the ability to allow sending of traps [fw-1] snmp-agent target -host trap address udp-domain 192.168.2.200 udp-port 162 params securityname public // configure the host that receives the trap Message [fw-1] snmp-agent trap enable standard linkdown linkup warmstart // set the reported configuration of information firewall 2 [H3C] sysname fw-2 [fw-2] int eth0/4 [fw-2-Ethernet0/4] ip add 192.168.3.2 24 [fw-2-Ethernet0/4] quit [fw-2] firewall zone untrust [fw-2-zone-untrust] add interface eth0/4 [fw-2-zone-untrust] add interface eth0/0 [fw-2-zone-untrust] ping 192.168.3.1 PING 192.168.3.1: 56 data bytes, press CTRL_C to break Reply from 192.168.3.1: bytes = 56 Sequence = 1 ttl = 255 time = 15 MS [fw-2-zone-untrust] int eth0/0 [fw-2-Ethernet0/0] ip add 192.168.4.1 24 [fw-2-Ethernet0/0] quit [fw-2] ip route -static 192.168.2.0 24 192.168.3.1 [fw-2] ping 192.168.2.200 // test whether or not to communicate with the host PING 192.168.2.200: 56 data bytes, press CTRL_C to break Reply from 192.168.2.200: bytes = 56 Sequence = 1 ttl = 127 time = 8 MS [fw-2] snmp-agent [fw-2] snmp-agent community read public [fw-2] snmp-agent community write private [fw-2] snmp-agent sys-info contact lisi [fw-2] snmp-agent sys-info location jifang-2 [fw-2] snmp-agent sys-info version all [fw-2] snmp-agent trap enable standard linkup linkdown warmstart [fw-2] snmp-agent trap enable [fw-2] snmp-agent target-host trap address udp-domain 192.168.2.200 params securityname public Switch configuration: <Quidway> system-view [Quidway] sysname sw-1 [sw-1] interface Vlan-interface 1 [sw-1-Vlan-interface1] ip add 192.168.4.2 24 [sw-1-Vlan-interface1] quit [sw-1] ip route-static 0.0.0.0 0 192.168.4.1 // configure the gateway [sw-1] snmp-agent [sw-1] snmp-agent community read public [sw-1] snmp-agent community write private [sw-1] snmp-agent sys-info contact lisi [sw-1] snmp-agent sys-info location jifang-2 [sw-1] snmp-agent sys-info version all [sw-1] snmp-agent trap enable [sw-1] snmp-agent trap enable standard linkup linkdown warmstart [sw-1] snmp-agent target-host trap address udp-domain 192.168.2.200 params securityname public [sw-1] local-user admin // Add user New local user added. [sw-1-luser-admin] password cipher admin // set password [sw-1-luser-admin] service-type telnet level 3 [sw-1-luser-admin] quit [sw-1] user-interface vty 0 3 [sw-1-ui-vty0-3] authentication-mode scheme 3) install What's _ up_Gold_v8.01650) this. width = 650; "title =" 2013-08-27_112734.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532564K3-2.png "/> On the installation page, click Next. By default, the installation page is 650.) this. width = 650; "style =" width: 675px; height: 456px "title =" 2013-08-27_112817.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532561H2-3.png "Width =" 637 "height =" 452 "/> after the installation is complete, click new map wizard under file to create a new view.

650) this. width = 650; "style =" float: none "title =" 2013-08-27_113003.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532563N9-4.png "/>

Click Next

650) this. width = 650; "style =" float: none "title =" 2013-08-27_113020.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532564444-5.png "/>

Select snmp

650) this. width = 650; "style =" float: none "title =" 2013-08-27_113033.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325A3L-6.png "/>

Note that the root device must enter the gateway of the server.

650) this. width = 650; "style =" float: none "title =" 2013-08-27_113343.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532562K8-7.png "/>

Select the task to be scanned

650) this. width = 650; "style =" float: none "title =" 2013-08-27_113428.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325BR0-8.png "/>

SCANNING PROCESS

650) this. width = 650; "style =" float: none "title =" 2013-08-27_113502.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532561008-9.png "/>

After scanning, we can see the IP addresses of each network segment and server.

650) this. width = 650; "style =" float: none "title =" 2013-08-27_114214.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325A442-10.png "/>

Click to complete. Many icons are displayed, including those for each CIDR block)

650) this. width = 650; "style =" float: none "title =" 2013-08-27_114547.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325C1M-11.png "width =" 604 "height =" 274 "/>

650) this. width = 650; "style =" float: none "title =" 2013-08-27_114608.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532562428-12.png "width =" 602 "height =" 270 "/>

At this time, we need to integrate them to form a network diagram, click edit, and place the mouse over the icon. We can right-click the option copy to copy and move it.

 

650) this. width = 650; "style =" float: none "title =" 2013-08-27_114322.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325C5c-13.png "width =" 661 "height =" 271 "/>

650) this. width = 650; "style =" float: none "title =" 2013-08-27_114341.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325BV6-14.png "width =" 656 "height =" 269 "/>

Finally, we form the following network diagram and return to map)

 

650) this. width = 650; "style =" width: 649px; float: none; height: 338px "title =" 2013-08-27_120808.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325CO0-15.png "width =" 588 "height =" 334 "/>

To control a device, right-click connect.

650) this. width = 650; "style =" float: none "title =" 2013-08-27_120852.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532562c4-16.png "width =" 644 "height =" 326 "/>

Click it to control the device.

650) this. width = 650; "style =" float: none "title =" 2013-08-27_120916.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325C3Y-17.png "/>

We can also enter the wap interface of the device. Also, on the device icon, right-click the browse option to view it. Is it very convenient?

650) this. width = 650; "style =" float: none "title =" 2013-08-27_121710.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325B950-18.png "width =" 660 "height =" 428 "/>

650) this. width = 650; "style =" width: 664px; float: none; height: 364px "title =" 2013-08-27_121548.png "src =" http://www.bkjia.com/uploads/allimg/131227/05325B959-19.png "width =" 861 "height =" 497 "/>

The software also provides an illustration of the normal operation of the device. If a service fails and stops working, a message is displayed as follows: 650) this. width = 650; "title =" 2013-08-27_122528.png "src =" http://www.bkjia.com/uploads/allimg/131227/0532563149-20.png "width =" 665 "height =" 201 "/> Well, our experiment is complete, if you are interested, try it out.

 

This article is from the "those once" blog, please be sure to keep this source http://slayr.blog.51cto.com/7613374/1283306