Warning: Use of undefined constant BLOGUPLOADDIR - assumed 'BLOGUPLOADDIR' (this will throw an Error in a future version of PHP) in /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php on line 71

Warning: Declaration of Post_Types_Order_Walker::start_lvl(&$output, $depth) should be compatible with Walker::start_lvl(&$output, $depth = 0, $args = Array) in /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/post-types-order/post-types-order.php on line 344

Warning: Declaration of Post_Types_Order_Walker::end_lvl(&$output, $depth) should be compatible with Walker::end_lvl(&$output, $depth = 0, $args = Array) in /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/post-types-order/post-types-order.php on line 344

Warning: Declaration of Post_Types_Order_Walker::start_el(&$output, $page, $depth, $args) should be compatible with Walker::start_el(&$output, $object, $depth = 0, $args = Array, $current_object_id = 0) in /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/post-types-order/post-types-order.php on line 344

Warning: Declaration of Post_Types_Order_Walker::end_el(&$output, $page, $depth) should be compatible with Walker::end_el(&$output, $object, $depth = 0, $args = Array) in /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/post-types-order/post-types-order.php on line 344

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648

Warning: Cannot modify header information - headers already sent by (output started at /home/enadeg5/public_html/wp-content/themes/Avada/framework/plugins/revslider/inc_php/base.class.php:71) in /home/enadeg5/public_html/wp-includes/rest-api/class-wp-rest-server.php on line 1648
{"id":135,"date":"2013-09-27T03:50:00","date_gmt":"2013-09-27T03:50:00","guid":{"rendered":"http:\/\/theipzone.com\/?p=135"},"modified":"2013-12-30T22:33:47","modified_gmt":"2013-12-30T22:33:47","slug":"snmp","status":"publish","type":"post","link":"http:\/\/theipzone.com\/blog\/2013\/09\/27\/snmp\/","title":{"rendered":"SNMP"},"content":{"rendered":"

 <\/p>\n

Application-layer management protocol used for monitoring and administration. SNMP operates by sending information to Network Management Servers (NMS). The NMS learns about problems in the network by receiving traps or inform messages generated by the individual device running SNMP or what is more commonly called the managed device.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

SNMP Operations<\/o:p><\/b><\/p>\n

– Agents listen to UDP port 161 for messages sent by the NMS<\/o:p><\/p>\n

– Responses are sent back to the originating NMS port from a dynamic port. Many agents use port 161 also for this target<\/o:p><\/p>\n

– Traps are received on port 162 of a NMS<\/o:p><\/p>\n

 <\/o:p><\/p>\n

The first two variants of SNMP have pretty much the same protocol structure.  <\/span>(V3 is shown below.) This means that each of them will encapsulate the same general message format into a UDP packet. This message will be similar to this:<\/o:p><\/p>\n

 <\/o:p><\/p>\n

\"clip_image002\"<\/a><\/span><\/o:p><\/p>\n

SNMP Message Sequence Diag<\/o:p><\/p>\n

 <\/o:p><\/p>\n

\"clip_image004\"<\/a><\/span><\/o:p><\/p>\n

SNMP Message Diagram<\/o:p><\/p>\n

 <\/o:p><\/p>\n

\"clip_image006\"<\/a><\/span><\/o:p><\/p>\n

Shark Capture showing Version, String and PDU<\/o:p><\/p>\n

 <\/o:p><\/b><\/p>\n

SNMP Version<\/b> field will be an integer value and it should be noted that both the NMS and the agent must agree on the version of SNMP being used to communicate. <\/o:p><\/p>\n

 <\/o:p><\/p>\n

SNMP community string<\/b> is best described as a string value used for the password check for the NMS before the managed device will allow it to access or manipulate the agent process.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

SNMP Protocol Data Unit (PDU)<\/b>. <\/o:p><\/p>\n

The actual communication of information in the SNMP Protocol is performed through the exchange of SNMP messages. These messages are sometimes called protocol data units or PDUs. The PDU is the higher-layer data that SNMP encapsulates; The values applied to this field represent various PDU types and formats.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

See SNMP Versions for SNMP PDUs<\/o:p><\/p>\n

 <\/o:p><\/p>\n

\"clip_image008\"<\/a><\/span><\/o:p><\/p>\n

 <\/o:p><\/p>\n

 <\/o:p><\/p>\n

SNMP Versions<\/o:p><\/b><\/p>\n

 <\/o:p><\/p>\n

SNMP V1: <\/o:p><\/p>\n

          <\/span><\/span><\/span>Simple request\/response model protocol. GetRequest and GetResponse message types<\/o:p><\/p>\n

          <\/span><\/span><\/span>The NMS issues requests and the managed devices supplied responses.<\/o:p><\/p>\n

          <\/span><\/span><\/span>Community strings that operate via plain text.<\/o:p><\/p>\n

          <\/span><\/span><\/span>Read Only (RO) and Read Write (RW). RO community only allows information to be gathered from the designated SNMP agent, and RW community accomplishes the same as the RO but adds the ability to set values and implement control.<\/o:p><\/p>\n

          <\/span><\/span><\/span>Access-list to define what hosts can query or control the managed device.<\/o:p><\/p>\n

 <\/o:p><\/p>\n\n\n\n\n\n\n\n\n
\n

SNMP V1 PDUs<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 0<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 1<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetNextRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 2<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetResponse<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 3<\/o:p><\/span><\/p>\n<\/td>\n

\n

SetRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 4<\/o:p><\/span><\/p>\n<\/td>\n

\n

Trap<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/o:p><\/p>\n

 <\/o:p><\/p>\n

SNMP V2<\/o:p><\/p>\n

          <\/span><\/span><\/span>New trap operation (GetInform) requires packet acknowledgement.<\/o:p><\/p>\n

          <\/span><\/span><\/span>New trap operation (GetBulk) retrieves large blocks of data.<\/o:p><\/p>\n

          <\/span><\/span><\/span>Community strings supports encrypted passwords. Note operational data is not encrypted.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

 <\/o:p><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
\n

SNMP V2 PDUs<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 0<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 1<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetNextRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 2<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetResponse<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 3<\/o:p><\/span><\/p>\n<\/td>\n

\n

SetRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 4<\/o:p><\/span><\/p>\n<\/td>\n

\n

Obsolete<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 5<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetBulkRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 6<\/o:p><\/span><\/p>\n<\/td>\n

\n

InformRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 7<\/o:p><\/span><\/p>\n<\/td>\n

\n

SNMPv2-Trap<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 8<\/o:p><\/span><\/p>\n<\/td>\n

\n

SNMPReport  <\/span>(defined in the RFC but not deployed in Cisco IOS)<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/o:p><\/p>\n

SNMP V3<\/o:p><\/p>\n

 <\/o:p><\/p>\n

\"clip_image009\"<\/a><\/span><\/o:p><\/p>\n

 <\/o:p><\/p>\n

          <\/span><\/span><\/span>New message format has security field that includes authentication and privacy, authorization and access control (password security, authentication and encryption).<\/o:p><\/p>\n

          <\/span><\/span><\/span>Ability to dynamically configure the SNMP agent using SNMP SET commands. This can be addition, deletion, and modification of configuration entries either locally or remotely.<\/o:p><\/p>\n

          <\/span><\/span><\/span>An Administrative Framework that allows us to define: entities with names, people and policies, username and role based management, notification destination, proxy relationships, remote configuration via SNMP operations<\/o:p><\/p>\n

 <\/o:p><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
\n

SNMP V3 PDUs<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 0<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 1<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetNextRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 2<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetResponse<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 3<\/o:p><\/span><\/p>\n<\/td>\n

\n

SetRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 4<\/o:p><\/span><\/p>\n<\/td>\n

\n

Obsolete<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 5<\/o:p><\/span><\/p>\n<\/td>\n

\n

GetBulkRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 6<\/o:p><\/span><\/p>\n<\/td>\n

\n

InformRequest<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 7<\/o:p><\/span><\/p>\n<\/td>\n

\n

SNMPv2-Trap<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n

\n

PDU Type 8<\/o:p><\/span><\/p>\n<\/td>\n

\n

SNMPReport  <\/span>(allows SNMP engines to communicate with one another)<\/o:p><\/span><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\"clip_image011\"<\/a><\/span><\/o:p><\/p>\n

 <\/o:p><\/p>\n

Auth: Specified the process of authenticating a packet without encrypting it.<\/o:p><\/p>\n

noAuth: Specifies that no authentication process takes place on SNMP packets.<\/o:p><\/p>\n

Priv: Specifies that the contents of a SNMP packet is \u201cscrambled\u201d or encrypted.<\/o:p><\/p>\n

noPriv: Specifies that no SNMP packets will be \u201cscrambled\u201d or encrypted.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

Security model ensures:<\/o:p><\/p>\n

          <\/span><\/span><\/span>Ensure that packets have not been manipulated in transit<\/o:p><\/p>\n

          <\/span><\/span><\/span>Verify that the packets are arriving from a valid source<\/o:p><\/p>\n

          <\/span><\/span><\/span>Capability to scramble the contents of a packet to keep unauthorized sources from seeing its contents<\/o:p><\/p>\n

 <\/o:p><\/p>\n

Data Collection<\/o:p><\/b><\/p>\n

Two processes (polling and notification) define how an NMS will learn the condition of its managed devices.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

Polling<\/o:p><\/i><\/p>\n

snmp-server community community [ro|rw] [ipv6 acl] [acl]<\/o:p><\/p>\n

 <\/o:p><\/p>\n

The NMS will either poll the agent periodically using RO or RW community strings,<\/o:p><\/p>\n

\"clip_image013\"<\/a><\/span><\/o:p><\/p>\n

 <\/o:p><\/p>\n

Notification<\/o:p><\/i><\/p>\n

snmp-server enable traps<\/o:p><\/p>\n

snmp-server host [traps|informs]<\/o:p><\/p>\n

 <\/o:p><\/p>\n

The agent itself will actively notify the NMS about changes through the use of traps or informs.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

\"clip_image015\"<\/a><\/span><\/o:p><\/p>\n

 <\/o:p><\/p>\n

V3 SNMP Poling\/Notification<\/o:p><\/i><\/p>\n

snmp-server group gname [auth|noauth|priv] [access [ipv6] acl]<\/o:p><\/p>\n

snmp-server group uname [auth md5|sha] [priv des|3des|aes] [access [ipv6] acl]<\/o:p><\/p>\n

 <\/o:p><\/p>\n

Managed Information Base<\/o:p><\/b><\/p>\n

These monitored values are defined in a hierarchical database that contains system information. This includes things like temperature, location, interface status or interface utilization.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

The MIB is set up like a directory that defines standard monitoring variables. These variables are referenced for interpretation by a sending and receiving system based on the use of Object Identifiers (OID).<\/o:p><\/p>\n

 <\/o:p><\/p>\n

An OID is a number that is used to represent the identity of a given MIB entry as well as clarify where in the hierarchical structure that given entry can be found.<\/o:p><\/p>\n

 <\/o:p><\/p>\n

 <\/o:p><\/p>\n

\"clip_image017\"<\/a><\/span><\/o:p><\/p>\n

 <\/o:p><\/p>\n

 <\/o:p><\/p>\n

Source: <\/o:p><\/b><\/p>\n

IP Expert VOD<\/o:p><\/p>\n

blog.ipexpert.com\/2012\/06\/11\/snmp-theory-and-operation\/<\/o:p><\/p>\n","protected":false},"excerpt":{"rendered":"

  Application-layer management protocol used for monitoring and administration. SNMP operates by sending information to Network Management Servers (NMS). The NMS learns about problems in the network by receiving traps or inform messages generated by the individual device running SNMP or what is more commonly called the managed device.   SNMP Operations – Agents listen to UDP port 161 for messages sent by the NMS – Responses are sent back to the originating NMS port from a dynamic port. Many agents use port 161 also for this target – Traps are received on port 162 of a NMS   The first two variants of SNMP have pretty much the same protocol structure.  (V3 is shown below.) This means that each of them will encapsulate the same general message format into a UDP packet. This message will be similar to this:   SNMP Message Sequence Diag   SNMP Message Diagram   Shark Capture showing Version, String and PDU   SNMP Version field will be an integer value and it should be noted that both the NMS and the agent must agree on the version of SNMP being used to communicate.   SNMP community string is best described as a string value used for the password check for the NMS before the managed device will allow it to access or manipulate the agent process.   SNMP Protocol Data Unit (PDU). The actual communication of information in the SNMP Protocol is performed through the exchange of SNMP messages. These messages are sometimes called protocol data units or PDUs. The PDU is the higher-layer data that SNMP encapsulates; The values applied to this field represent various PDU types and formats.   See SNMP Versions for SNMP PDUs     […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[8,7],"tags":[4,6,38],"_links":{"self":[{"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/posts\/135"}],"collection":[{"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/comments?post=135"}],"version-history":[{"count":1,"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/posts\/135\/revisions"}],"predecessor-version":[{"id":136,"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/posts\/135\/revisions\/136"}],"wp:attachment":[{"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/media?parent=135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/categories?post=135"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/theipzone.com\/wp-json\/wp\/v2\/tags?post=135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}