Avanced Network 1 Network Management Introduction

1
Avanced Network 1Network Management -
Introduction

• Minimodule 7 02-11-2006

Ole Krog Thomsen TDC
2
Contact information
Ole Krog Thomsen, M. Sc Systems Analyst

• TDC
• Data Networks
• Sletvej 30, 9-205
• DK-8310 Tranbjerg J
• Denmark

• Tel [phone]
• Mobile [phone]
• E-Mail okt_at_tdc.dk
• okt_at_control.aau.dk
• http//www.control.aau.dk/okt

3
Content

• The lecture will give an introduction to the
  following topics
• Service Network Management architecture
• ITUs TMN (Telecommunication Management Network)
  model
• Internet SNMP (Simple Network Management
  Protocol) model

4
Manual Handling
Manual Telephone Exchange Computer Machine Room
5
Automatic Telephone ExchangesDistributed
Computer Systems

• The switch to automatic telephone exchanges, and
  the switch from centralized computer rooms to
  distributed systems with terminal access, remote
  print and remote job entry both took place from
  the mid-sixties to the mid-seventies
• Both these changes caused the need for the
  ability to do remote monitoring and remote
  control e.g. NETWORK MANAGEMENT of the involved
  systems and exchanges

6
Netværks teknologi

• Telenet (Telecommunications Network)?
• Communication Protocol?
• LAN/WAN?
• Ethernet?
• Hub/Switch/Router?
• Multiplexer?
• Modem?
• SDH/PDH/ATM?
• ...

7
IP trafik

8

Entire ATMNetwork
Entire ATMNetwork
9

10
ATM Network (test environment)
11
List of ATM paths
12
ObjectStatistics
13
ADMAN ATM Customer
14
AXiOSS automatic provisioning
15
Standard Java IMS
16
BPM Client
17
Topology view TDC customer
18
Topology view wholesale customer
19
The TMN model
20
Scope / responsibility

• Management systems comprises the following
  components (systems responsibility)
• Operations System (OS)
• Operations Support System (OSS)
• Data Communication Network (DCN)
• Workstation (WS)
• Network Elements (NE)
• The management functionality

21
Division of management

• Management is frequently divided in two ways
• management functional areas
• TMN logical layers

22
Functional Model

OSI Functional Model
SecurityManagement
AccountingManagement
PerformanceManagement
ConfigurationManagement
FaultManagement
23
Management Functional Areas

• Fault Management
• Configuration Management
• Accounting Management
• Performance Management
• Security Management

24
TMN Logical Layered Model
25
(No Transcript)
26
SNMP Architecture

• several (potentially many) nodes, each with an
  SNMP entity containing command responder and
  notification originator applications, which have
  access to manage-ment instrumentation
  (traditionally called agents)
• at least one SNMP entity containing command
  generator and/or notification receiver
  applications (traditionally called a manager)
  and,
• a management protocol used to convey management
  information between the SNMP entities.

27
SNMP Architecture
28
Object Identifier tree
29
SNMP Communication Architecture
30
Protocol Data
31
ASN.1 TLV - kodning
Definite encoding
Indefinite encoding
32
SNMP PDU

• GetRequest-PDU 0 IMPLICIT SEQUENCE
• request-id RequestID,
• error-status ErrorStatus, -- always 0
  
• error-index ErrorIndex, -- always 0
  
• variable-bindings VarBindList
• GetNextRequest-PDU 1 IMPLICIT SEQUENCE
  
• GetResponse-PDU 2 IMPLICIT SEQUENCE
• SetRequest-PDU 3 IMPLICIT SEQUENCE
• VarBind SEQUENCE
• name ObjectName,
• value ObjectSyntax
• VarBindList SEQUENCE OF VarBind

33
Leksicographical sorting
A B T E 1.1 1.2 2.1 2.2 3.1 3.2 Z
34
SNMPv2 Major Changes

• Bulk data transfer
• Manager-to-manager message
• Enhancements to SMI SMIv2
• Module definitions MODULE-IDENTITY macro
• Object definitions OBJECT-TYPE macro
• Trap definitions NOTIFICATION-TYPE macro
• Textual conventions
• Conformance statements
• Row creation and deletion in table
• MIB enhancements
• Transport mappings

35
SNMPv2 New Messages

• inform-request
• manager-to-manager message
• get-bulk-request
• transfer of large data
• report
• not used

36
SNMPv2 Management Architecture
37

38
Row Creation and Deletion
39
SNMPv2 GetBulkRequest PDU
40
Get-Next-Request Operation
41
Get-Bulk-Request Operation
42
SNMPv2 Trap
43
SNMPv3 Architecture
44
New Documents December 2002

• rfc 3410
• rfc 3411
• rfc 3412
• rfc 3413
• rfc 3414
• rfc 3415
• rfc 3416
• rfc 3417
• rfc 3418

rfc 2270 rfc 2271 rfc 2272 rfc 2273 rfc 2274 rfc
2275 rfc 1905 rfc 1906 rfc 1907
rfc 2276 still valid
45
Command Generator
46
Authoritative Engine

• When an SNMP message contains a payload that
  expects a response (for example, a Get, GetNext,
  GetBulk, Set, or Inform PDU), then the receiver
  of such messages is authoritative.
• When an SNMP message contains a payload that does
  not expect a response (for example, an
  SNMPv2-Trap, Response, or Report PDU), then the
  sender of such a message is authoritative.

47
SNMP Engine ID

• Each SNMP engine has a unique ID snmpEngineID
• Acme Networks enterprises 696
• SNMPv1 snmpEngineID 000002b8H
• SNMPv3 snmpEngineID 800002b8H (the 1st
  octet is 1000 0000)

48
(No Transcript)
49
User-Based Security Model

• Based on traditional user name concept
• USM primitives across abstract service interfaces
• Authentication service primitives
• authenticateOutgoingMsg
• authenticateIncomingMsg
• Privacy Services
• encryptData
• decryptData

50
SNMPv3 Message Format
51
Idea Behind Replay Protection
52
Idea Behind Authentication
53
Idea Behind Encryption
54
Privacy Module

• Encryption and decryption of scoped PDU (context
  engine ID, context name, and PDU)
• CBC - DES (Cipher Block Chaining Data
  Encryption Standard) symmetric protocol
• Encryption key (and initialization vector) made
  up of secret key (user password), and timeliness
  value
• Privacy parameter is salt value (unique foreach
  packet) in CBC-DES

55
Access Control
56
System Management Model
57
CMIP Protocol Elements

• INVOKE
• INVOKE/RESULT
• INVOKE
• INVOKE/RESULT
• INVOKE
• INVOKE/RESULT
• INVOKE
• INVOKE/RESULT
• INVOKE/RESULT
• INVOKE/RESULT
• INVOKE/RESULT

• M-EVENT-REPORT
• M-EVENT-REPORT-CONFIRMED
• M-LINKED-REPLY
• M-GET
• M-SET
• M-SET-CONFIRMED
• M-ACTION
• M-ACTION-CONFIRMED
• M-CREATE
• M-DELETE
• M-CANCEL-GET

01-04-2004
TMN OSI Manaement
57
58
Management Information ModelISO/IEC
10164-1/ITU-T X.720

• Object oriented design
• encapsulation
• attributes
• Management operations
• attribute oriented operations
• operations on Managed Objects
• Notifications
• Filters
• attribute value assertions (AVA)

59
Inheritance Hierarchy
60
(No Transcript)
61
EtherealCaptureOptions
62
Ethereal capture display
63
(No Transcript)
64
MRTG

• Multi Router Traffic Grouper (Oeticker and Rand)
• www.ee.ethz.ch/stats/mrtg/
• Generates graphic presentation of traffic on Web
• Daily view
• Weekly view
• Monthly view
• Yearly view