Chapter 9

Network Management

A note on the use of these ppt slides:

Were making these slides freely available to all (faculty, students, readers).
Theyre in PowerPoint form so you can add, modify, and delete slides
(including this one) and slide content to suit your needs. They obviously
Computer Networking:
represent a lot of work on our part. In return for use, we only ask the A Top Down Approach ,
following:
If you use these slides (e.g., in a class) in substantially unaltered form,
4th edition.
that you mention their source (after all, wed like people to use our book!) Jim Kurose, Keith Ross
If you post any slides in substantially unaltered form on a www site, that
Addison-Wesley, July

al
you note that they are adapted from (or perhaps identical to) our slides, and
note our copyright of this material. 2007.

ep
Thanks and enjoy! JFK/KWR

itn
All material copyright 1996-2007
J.F Kurose and K.W. Ross, All Rights Reserved

cs
Network Management 9-1
Chapter 9: Network Management
Chapter goals:
introduction to network management
motivation
major components
Internet network management framework
MIB: management information base
SMI: data definition language
SNMP: protocol for network management
security and administration

al
presentation services: ASN.1

ep
itn
cs
Network Management 9-2
Chapter 9 outline
What is network management?
Internet-standard management framework
Structure of Management Information: SMI
Management Information Base: MIB
SNMP Protocol Operations and Transport Mappings
Security and Administration

ASN.1

al
ep
itn
cs
Network Management 9-3
What is network management?
autonomous systems (aka network): 100s or 1000s
of interacting hardware/software components
other complex systems requiring monitoring, control:
jet airplane
nuclear power plant
others?

"Network management includes the deployment, integration

and coordination of the hardware, software, and human
elements to monitor, test, poll, configure, analyze, evaluate,

al
and control the network and element resources to meet the

ep
real-time, operational performance, and Quality of Service

itn
requirements at a reasonable cost."

cs
Network Management 9-4
Infrastructure for network management
definitions:

managing entity agent data

managing managed devices contain
data managed device
entity managed objects whose
data is gathered into a
agent data Management Information
network
management Base (MIB)
managed device
protocol

agent data
agent data
managed device

al
ep
managed device

itn
cs
Network Management 9-5
Network Management standards

OSI CMIP SNMP: Simple Network

Common Management Management Protocol
Information Protocol Internet roots (SGMP)
designed 1980s: the started simple
unifying net deployed, adopted rapidly
management standard growth: size, complexity
too slowly
currently: SNMP V3
standardized
de facto network
management standard

al
ep
itn
cs
Network Management 9-6
Chapter 9 outline
What is network management?
Internet-standard management framework
Structure of Management Information: SMI
Management Information Base: MIB
SNMP Protocol Operations and Transport Mappings
Security and Administration

ASN.1

al
ep
itn
cs
Network Management 9-7
 SNMP overview: 4 key parts
Management information base (MIB):
distributed information store of network
management data
Structure of Management Information (SMI):
data definition language for MIB objects
SNMP protocol
convey manager<->managed object info, commands
security, administration capabilities

al
major addition in SNMPv3

ep
itn
cs
Network Management 9-8
SMI: data definition language
Purpose: syntax, semantics of Basic Data Types
management data well-
defined, unambiguous INTEGER
Integer32
base data types:
Unsigned32
straightforward, boring OCTET STRING
OBJECT-TYPE OBJECT IDENTIFIED
data type, status, IPaddress
semantics of managed Counter32
object Counter64
MODULE-IDENTITY
Guage32

al
Time Ticks

ep
groups related objects
Opaque
into MIB module

itn
cs
Network Management 9-9
SNMP MIB
MIB module specified via SMI
MODULE-IDENTITY
(100 standardized MIBs, more vendor-specific)

MODULE OBJECT TYPE:

OBJECT TYPE:OBJECT TYPE:

objects specified via SMI

al
OBJECT-TYPE construct

ep
itn
cs
Network Management 9-10
 SMI: Object, module examples
OBJECT-TYPE: ipInDelivers MODULE-IDENTITY: ipMIB

ipMIB MODULE-IDENTITY
ipInDelivers OBJECT TYPE LAST-UPDATED 941101000Z
SYNTAX Counter32 ORGANZATION IETF SNPv2
MAX-ACCESS read-only Working Group
STATUS current CONTACT-INFO
Keith McCloghrie
DESCRIPTION

The total number of input DESCRIPTION
datagrams successfully The MIB module for managing IP
delivered to IP user- and ICMP implementations, but
protocols (including ICMP) excluding their management of

al
::= { ip 9} IP routes.

ep
REVISION 019331000Z

itn
::= {mib-2 48}

cs
Network Management 9-11
 MIB example: UDP module
Object ID Name Type Comments
1.3.6.1.2.1.7.1 UDPInDatagrams Counter32 total # datagrams delivered
at this node
1.3.6.1.2.1.7.2 UDPNoPorts Counter32 # underliverable datagrams
no app at portl
1.3.6.1.2.1.7.3 UDInErrors Counter32 # undeliverable datagrams
all other reasons
1.3.6.1.2.1.7.4 UDPOutDatagrams Counter32 # datagrams sent
1.3.6.1.2.1.7.5 udpTable SEQUENCE one entry for each port

al
in use by app, gives port #

ep
and IP address

itn
cs
Network Management 9-12
SNMP Naming
question: how to name every possible standard object
(protocol, data, more..) in every possible network
standard??
answer: ISO Object Identifier tree:
hierarchical naming of all objects
each branchpoint has name, number

1.3.6.1.2.1.7.1
ISO udpInDatagrams

al
ISO-ident. Org. UDP

ep
US DoD MIB2
management

itn
Internet

cs
Network Management 9-13
OSI
Object
Identifier
Tree

al
ep
itn
Check out www.alvestrand.no/harald/objectid/top.html

cs
Network Management 9-14
SNMP protocol
Two ways to convey MIB info, commands:

managing managing
entity entity

request
trap msg
response

agent data agent data

al
Managed device Managed device

ep
request/response mode trap mode

itn
cs
Network Management 9-15
SNMP protocol: message types
Message type Function
GetRequest
Mgr-to-agent: get me data
GetNextRequest
(instance,next in list, block)
GetBulkRequest

InformRequest Mgr-to-Mgr: heres MIB value

SetRequest Mgr-to-agent: set MIB value

Response Agent-to-mgr: value, response to

Request

al
ep
Trap Agent-to-mgr: inform manager
of exceptional event

itn
cs
Network Management 9-16
SNMP protocol: message formats

al
ep
itn
cs
Network Management 9-17
SNMP security and administration

encryption: DES-encrypt SNMP message

authentication: compute, send MIC(m,k):
compute hash (MIC) over message (m),
secret shared key (k)
protection against playback: use nonce
view-based access control
SNMP entity maintains database of access
rights, policies for various users

al
database itself accessible as managed object!

ep
itn
cs
Network Management 9-18
Chapter 9 outline
What is network management?
Internet-standard management framework
Structure of Management Information: SMI
Management Information Base: MIB
SNMP Protocol Operations and Transport Mappings
Security and Administration

The presentation problem: ASN.1

al
ep
itn
cs
Network Management 9-19
The presentation problem
Q: does perfect memory-to-memory copy
solve the communication problem?
A: not always!

struct { test.code a test.code a

char code; test.x 00000001
int x; 00000011 test.x 00000011
} test; 00000001
test.x = 256;
test.code=a host 2 format
host 1 format

al
ep
problem: different data format, storage conventions

itn
cs
Network Management 9-20
A real-life presentation problem:

grandma 2007 teenager

aging 60s

al
hippie

ep
itn
cs
Network Management 9-21
 Presentation problem: potential solutions
1. Sender learns receivers format. Sender translates
into receivers format. Sender sends.
real-world analogy?
pros and cons?
2. Sender sends. Receiver learns senders format.
Receiver translate into receiver-local format
real-world-analogy
pros and cons?
3. Sender translates host-independent format. Sends.
Receiver translates to receiver-local format.
real-world analogy?

al
pros and cons?

ep
itn
cs
Network Management 9-22
 Solving the presentation problem
1. Translate local-host format to host-independent format
2. Transmit data in host-independent format
3. Translate host-independent format to remote-host
format

al
ep
aging 60s

itn
grandma hippie 2007 teenager

cs
Network Management 9-23
ASN.1: Abstract Syntax Notation 1

ISO standard X.680

used extensively in Internet
like eating vegetables, knowing this good for you!

defined data types, object constructors

like SMI

BER: Basic Encoding Rules

specify how ASN.1-defined data objects to be
transmitted
each transmitted object has Type, Length, Value

al
ep
(TLV) encoding

itn
cs
Network Management 9-24
TLV Encoding
Idea: transmitted data is self-identifying
T: data type, one of ASN.1-defined types
L: length of data in bytes
V: value of data, encoded according to ASN.1
standard
Tag Value Type
1 Boolean
2 Integer
3 Bitstring
4 Octet string

al
5 Null

ep
6 Object Identifier

itn
9 Real

cs
Network Management 9-25
TLV
encoding:
example

Value, 259
Length, 2 bytes
Type=2, integer

al
Value, 5 octets (chars)

ep
Length, 5 bytes
Type=4, octet string

itn
cs
Network Management 9-26
Network Management: summary
network management
extremely important: 80% of network cost
ASN.1 for data description
SNMP protocol as a tool for conveying
information
Network management: more art than science
what to measure/monitor
how to respond to failures?
alarm correlation/filtering?

al
ep
itn
cs
Network Management 9-27