Cisco Systems CCNA Version 3 Semester 4 Module 6 Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 1

OUTLINE 6.1 Workstations and Servers 6.1.1 Workstations 6.1.2 Servers 6.1.3 Client-server relationship 6.1.4 Introduction to NOS 6.1.5 Microsoft NT, 2000, and .NET 6.1.6 UNIX, Sun, HP, and LINUX 6.1.7 Apple 6.1.8 Concept of service on servers 6.2 Network Management 6.2.1 Introduction to network management 6.2.2 OSI and network management model 6.2.3 SNMP and CMIP standards 6.2.4 SNMP operation 6.2.5 Structure of management information and MIBs 6.2.6 SNMP protocol 6.2.7 Configuring SNMP 6.2.8 RMON 6.2.9 Syslog Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 2

Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 3

Docking Station Work Station 6.1.1 Workstations UNIX or Linux can also serve as a desktop operating system but are usually found on high-end computers Docking Station Work Station Intercepts user data and application commands Directs the command to either the local operating system or the network interface card (NIC) Delivers transmissions from the network to the application Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 4

A diskless workstation is a special computer that runs on a network. 6.1.1 Workstations A diskless workstation is a special computer that runs on a network. It has no disk drives but otherwise is a normal computer. Because they have no disk drives, it is not possible to upload data from the workstation or download anything to it. A diskless workstation cannot pass a virus onto the network, nor can it be used to take data from the network by copying this information to a disk drive. For this reason, such workstations are used in networks where security is paramount. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 5

6.1.2 Servers Hypertext Transfer Protocol (HTTP) File Transfer Protocol (FTP) Domain Name System (DNS) Simple Mail Transfer Protocol (SMTP) Post Office Protocol 3 (POP3) Internet Messaging Access Protocol (IMAP) File sharing protocols include Sun Microsystems Network File System (NFS) Microsoft Server Message Block (SMB).   Print services Dynamic Host Configuration Protocol (DHCP) Firewall: Proxy or Network Address Translation (NAT)  Some Windows operating systems may be installed on both workstations and servers. The NT/2000/XP versions of Windows software provide network server capability. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 6

6.1.2 Servers Servers are typically larger systems than workstations Extra memory for multiple tasks that are active or resident in memory at the same time. Extra disk space for shared files and as an extension to the internal memory on the system. Extra expansion slots to connect shared devices, such as printers and multiple network interfaces. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 7

6.1.2 Servers Multiprocessor systems are capable of executing multiple tasks in parallel by assigning each task to a different processor. Must function effectively under heavy loads. Redundancy is a feature of fault tolerant systems that are designed to survive failures and can be repaired without interruption while the systems are up and running. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 8

One Very Busy Spigot 6.1.2 Servers Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 9

6.1.2 Servers Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 10

6.1.2 Servers Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 11

6.1.2 Servers Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 12

Most organizations use several servers. Typically One server running a NOS may work well when serving only a handful of clients. Most organizations use several servers. Typically one server for e-mail one server for file sharing one for FTP. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 13

6.1.2 Servers The concentration of network resources makes the data easier to back up and maintain. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 14

6.1.3 Client-server relationship In a typical file server environment, the client would retrieve large portions of the database files to process the files locally. With client-server computing, the large database is stored, and the processing takes place on the server. A relatively small amount of data or results might be passed across the network. From a NETWORK point of view, any computer running TCP/IP (workstation or a server) is considered a host. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 15

6.1.3 Client-server relationship The workstation and server normally would be connected to the LAN by a hub or switch. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 16

6.1.4 Introduction to NOS 6.1.4 Introduction to NOS Performance A NOS must perform well at reading and writing files across the network between clients and servers. It must be able to maintain fast performance under heavy loads, when many clients are making requests. Consistent performance under heavy demand is an important standard for a NOS. Management and monitoring The management interface on the NOS server provides the tools for server monitoring, client administration, file, print, and disk storage management. The management interface provides tools for the installation of new services and the configuration of those services. Additionally, servers require regular monitoring and adjustment. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 17

6.1.4 Introduction to NOS 6.1.4 Introduction to NOS Security A NOS must protect the shared resources under its control. Security includes authenticating user access to services to prevent unauthorized access to the network resources. Security also performs encryption to protect information as it travels between clients and servers. Scalability Scalability is the ability of a NOS to grow without degradation in performance. The NOS must be capable of sustaining performance as new users join the network and new servers are added to support them. Robustness/fault tolerance A measure of robustness is the ability to deliver services consistently under heavy load and to sustain its services if components or processes fail. Using redundant disk devices and balancing the workload across multiple servers can improve NOS robustness. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 18

6.1.5 Microsoft NT, 2000, and .NET Windows 2000 Professional is not designed to be a full NOS. It does not provide a domain controller, DNS server, DHCP server, or render any of the services that can be deployed with Windows 2000 Server. Windows 2000 Server adds the normal server-specific functions. It provides integrated connectivity with Novell NetWare, UNIX, and AppleTalk systems and can also be configured as a communications server. Windows .NET Server is built on the Windows 2000 Server kernel to run enterprise-level web and FTP sites. Equivalent to Linux and UNIX server operating systems. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 19

6.1.6 UNIX, Sun, HP, and LINUX UNIX is the name of a group of operating systems that trace their origins back to 1969 at Bell Labs. Since its inception, UNIX was designed to support multiple users and multitasking. It was originally sold to run powerful network servers, not desktop computers. Solaris is currently the most widely used version of UNIX in the world for large networks and Internet websites. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 20

6.1.6 UNIX, Sun, HP, and LINUX Linux is one of the most powerful and reliable operating systems in the world today. Linux has already made inroads as a platform for power users and in the enterprise server arena. Linux is less often deployed as a corporate desktop operating system. Recent distributions of Linux have networking components built in for connecting to a LAN, establishing a dialup connection to the Internet, or other remote network. TCP/IP is integrated into the Linux kernel instead of being implemented as a separate subsystem. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 21

6.1.6 UNIX, Sun, HP, and LINUX In 1991, a Finnish student named Linus Torvalds began work on an operating system for an Intel 80386-based computer. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 22

6.1.6 UNIX, Sun, HP, and LINUX Torvald's work led to a world-wide collaborative effort to develop Linux, an open source operating system that looks and feels like UNIX. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 23

6.1.6 UNIX, Sun, HP, and LINUX Some advantages of Linux as a desktop operating system and network client: It is a true 32-bit operating system. It supports preemptive multitasking and virtual memory. The code is open source and thus available for anyone to enhance and improve. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 24

6.1.7 Apple Mac OS X provides a new feature that allows for AppleTalk and Windows connectivity. The Mac OS X core operating system is UNIX-based. The Mac GUI resembles a cross between Windows XP and Linux X-windows GUI. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 25

Network processes are referred to as services in Windows 2000 6.1.8 Concept of service on servers Remote management allows administrators to configure networked systems that are miles apart. Network processes are referred to as services in Windows 2000 daemons in UNIX and Linux. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 26

6.1.8 Concept of service on servers The two most common web server software packages are Microsoft Internet Information Services (IIS) – Windows platform Apache Web Server – Unix and Linux platform Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 27

6.1.8 Concept of service on servers Most popular network processes rely on the TCP/IP suite of protocols. TCP/IP are vulnerable to unauthorized scans and malicious attacks. Denial of service (DoS) attacks computer viruses fast-spreading Internet worms Recent versions of popular NOSs restrict the default network services. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 28

OUTLINE 6.1 Workstations and Servers 6.1.1 Workstations 6.1.2 Servers 6.1.3 Client-server relationship 6.1.4 Introduction to NOS 6.1.5 Microsoft NT, 2000, and .NET 6.1.6 UNIX, Sun, HP, and LINUX 6.1.7 Apple 6.1.8 Concept of service on servers 6.2 Network Management 6.2.1 Introduction to network management 6.2.2 OSI and network management model 6.2.3 SNMP and CMIP standards 6.2.4 SNMP operation 6.2.5 Structure of management information and MIBs 6.2.6 SNMP protocol 6.2.7 Configuring SNMP 6.2.8 RMON 6.2.9 Syslog Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 29

6.2.1 Introduction to network management Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 30

6.2.1 Introduction to network management Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 31

6.2.1 Introduction to network management Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 32

6.2.1 Introduction to network management Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 33

6.2.2 OSI and network management model OSI standard. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 34

6.2.2 OSI and network management model Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 35

6.2.2 OSI and network management model Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 36

6.2.2 OSI and network management model Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 37

6.2.2 OSI and network management model Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 38

6.2.3 SNMP and CMIP standards Simple Network Management Protocol – IETF community Common Management Information Protocol – Telecommunications community Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 39

6.2.4 SNMP operation Simple Network Management Protocol (SNMP) - application layer protocol that facilitates the exchange of management information between network devices. SNMP uses UDP over ports 161 and 162. Eg. Packets per second sent on an interface Eg. Color of the technician’s shirt. Eg. Number of open TCP connections Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 40

Number and state of its virtual circuits 6.2.4 SNMP operation Number and state of its virtual circuits Number of certain kinds of error messages received Number of bytes and packets in and out of the device Maximum output queue length, for routers and other internetworking devices Broadcast messages sent and received Network interfaces going down and coming up Get – Enables the management station to retrieve the value of MIB objects from the agent. Set – Enables the management station to set the value of MIB objects at the agent. Trap – Enables the agent to notify the management station of significant events. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 41

SNMP Proprietary 6.2.4 SNMP operation The RMON probe gathers management information locally, The network manager periodically retrieves a summary of this data. SNMP Proprietary Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 42

6.2.4 SNMP operation The NMS is an ordinary workstation. Large RAM, to hold all the co-resident management applications. Typical network protocol stack, such as TCP/IP. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 43

AdventNet Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 44

MG-SOFT MIB Browser Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 45

http://www.networkview.com/Free Demo NetworkView http://www.networkview.com/Free Demo US$59. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 46

Ethereal Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 47

6.2.4 SNMP operation Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 48

6.2.4 SNMP operation Aspen Systems Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 49

Linux SNMP Network Management Tools 6.2.4 SNMP operation Linux SNMP Network Management Tools This page assumes that you already have a working knowledge of the basic tools -- ping, netstat, traceroute, nslookup, dig, tcpdump, /proc/net, ipfwadmin, tcpwrapper, maskd and are looking for graphical, distributed tools. SNMP FAQ Frequently asked questions about SNMP. Linux CMU SNMP Project -- provides the standard bilingual SNMPv1/v2 agent, incl USEC support, as well as command line tools; includes MIB-2 (RFC 1213) Identification MIB (RFC 1414) Host Resources MIB (RFC 1514) and the TUBS Linux MIB, as well as pointers to the Tcl and Perl snmp libs. SUNY Bufallo Network Management Archives -- the most complete archive around, including tools, MIB compilers, documentation. Not Linux specific. The Simple Web site maintains info on internet management. Simple Times A periodical for Internet network management. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 50

6.2.4 SNMP operation Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 51

6.2.4 SNMP operation Central Manager sends out queries to all agents, no matter where they are located. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 52

In a distributed network NMS can act in a client-server architecture. 6.2.4 SNMP operation In a distributed network NMS can act in a client-server architecture. The clients send their data to the master server for centralized storage Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 53

Management information is distributed over the peer NMSs. 6.2.4 SNMP operation Distributed NMSs have equal responsibility, with their own manager databases. Management information is distributed over the peer NMSs. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 54

All vendors are encouraged to make their MIB definitions known. 6.2.5 Structure of management information and MIBs A MIB is used to store the structured information representing network elements and their attributes. All vendors are encouraged to make their MIB definitions known. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 55

6.2.5 Structure of management information and MIBs The structure itself is defined in the Structure of Management Information (SMI) the data types that can be used to store an object, how those objects are named, and how they are encoded for transmission over a network. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 56

Page 1 of 46 6.2.5 Structure of management information and MIBs A unique object identifier, which is a number in dot notation, identifies each managed object Each object identifier is described using abstract syntax notation (ASN.1). Page 1 of 46 Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 57

Win2000Pro 6.2.5 Structure of management information and MIBs A unique object identifier, which is a number in dot notation, identifies each managed object Each object identifier is described using abstract syntax notation (ASN.1). Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 58

6.2.5 Structure of management information and MIBs Formatted Raw Win2000Pro Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 59

Page 46 of 46 6.2.5 Structure of management information and MIBs Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 60

IEEE reference 6.2.5 Structure of management information and MIBs Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 61

6.2.5 Structure of management information and MIBs Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 62

6.2.5 Structure of management information and MIBs Once an assigned enterprise value has been given, the vendor is responsible for creating and maintaining sub-trees. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 63

6.2.6 SNMP protocol The agent is a software function embedded in most networked devices, such as routers, switches, managed hubs, printers, and servers. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 64

6.2.6 SNMP protocol The initial protocol specification is referred to as SNMPv1 Interaction between the manager and the agent is facilitated by (SNMP). The term simple comes from the restricted number of message types that are part of the initial protocol specification. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 65

6.2.6 SNMP protocol NMS has the ability to issue changes of a value in the managed device. This allows an administrator to configure a managed device using SNMP. SNMPv2c addressed limitations in SNMPv1 introduced the GetBulkRequest message type and the addition of 64-bit counters to the MIB. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 66

This processing should not take precedence over production services. 6.2.6 SNMP protocol The interaction between the manager and the managed device introduces traffic to the network. Aggressive monitoring strategies can negatively affect network performance. Bandwidth utilizations will go up, which may be an issue for WAN environments. Moreover, monitoring has a performance impact on the devices themselves being monitored, since they are required to process the manager requests. This processing should not take precedence over production services. A general rule is that a minimum amount of information should be polled as infrequently as possible. Determine which devices and links are most critical and what type of data is required. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 67

6.2.6 SNMP protocol Each SNMP message contains a clear text string, called a community string. The community string is used like a password to restrict access to managed devices. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 68

6.2.6 SNMP protocol An example of an SNMPv2c message. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 69

6.2.6 SNMP protocol An example of an SNMPv3 message. (SNMPv3 addresses clear text security concerns.) Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 70

6.2.6 SNMP protocol Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 71

6.2.7 Configuring SNMP ro – (Optional) Specifies read-only access. Authorized management stations are only able to retrieve MIB objects. rw – (Optional) Specifies read-write access. Authorized management stations are able to both retrieve and modify MIB objects Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 72

6.2.8 RMON Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 73

6.2.8 RMON RMON was developed to overcome limitations in the capabilities of SNMP. SNMP can store only limited amounts of information (counters for overall traffic, number of errors, etc.), and, as it is a polled system, network loading is high. RMON on the other hand, provides much more detailed information and offers a simplified manner of data collection. RMON makes use of a client (like a Network Management Console, a Protocol Analyzer, or a Network Analyzer like the new Fluke Networks OptiView). The client then gathers the statistics from either one or more agents. These agents can be stand-alone RMON probes (located in strategic spots in the network) and/or embedded RMON agents in routers and switches. In total RMON specifies 10 services called RMON Groups. Not all devices have to support all services as some of the RMON groups require extensive overhead (memory and processor power). Most stand-alone RMON probes will typically support all services, but embedded RMON may be limited to only a few groups. The RMON client communicates directly to the RMON agent. RMON1 only collects data at the MAC level, so you will only get information on the captured packets by decoding them with a Protocol Analyzer. A switch will limit your view of the network. RMON2 has been developed to provide data on higher level protocols such as IP and IPX, and up through the stack to the applications layer. RMON2 provides full information on which protocols are being used on the network and the mix between them, standard RMON host and matrix information also for the network an applications layers, and a customizable history function that can be used for base-lining. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 74

6.2.8 RMON RMON2 RMON Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 75

6.2.8 RMON Statistics (OID: 1.3.6.1.2.1.16.1)  This group provides basic statistics for the given network interface type on the probe. For example, it will collect a breakdown of packet sizes on the segment over time. History (OID: 1.3.6.1.2.1.16.2)  The history group is responsible for storing periodic samples of the segment for later analysis. Alarm (OID: 1.3.6.1.2.1.16.3)  Using preconfigured thresholds on the probe, this group can generate alarm events when a parameter surpasses a threshold. Hosts (OID: 1.3.6.1.2.1.16.4)  This group keeps track of the MAC addresses of the devices that are communicating on this segment. HostTopN (OID: 1.3.6.1.2.1.16.5)  This group is used to store data regarding the top "talkers" based on some criteria provided by the management station. Matrix (OID: 1.3.6.1.2.1.16.6)  This group holds a table that defines pairs of devices who are talking to one another. Filter (OID: 1.3.6.1.2.1.16.7)  This group allows a Network Manager to define one or more filters, based on a value and offset, for packets that want to be captured. The definition of that filter(s) exists in this group. Capture Packets (OID: 1.3.6.1.2.1.16.8)  This group requires the presence of the Filter group and provides a means of capturing packet flowing through the network interface for later review. This group actually stores the contents of each packet flowing into the interface and meeting the filter criteria. Event (OID: 1.3.6.1.2.1.16.9)  This group provides the mechanism for the device to generate events and alarms. It is basically the holding table for any events that occur on the device, either through configuration or exception. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 76

6.2.8 RMON Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 77

6.2.9 Syslog Direct to the console raw data. To a host running an NMS client for a better display. To a server for further processing. The syslog utility is a mechanism for applications, processes, and the operating system of Cisco devices to report activity and error conditions. The syslog protocol is used to allow Cisco devices to issue these unsolicited messages to a network management station. Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 78

6.2.8 RMON Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 79

6.2.9 Syslog Emergencies Alerts Critical Errors Warnings Notifications To enable logging to all supported destinations: Router(config)#logging on To send log messages to a syslog server host, such as CiscoWorks2000: Router(config)#logging hostname | ip address Emergencies Alerts Critical Errors Warnings Notifications Informational Debugging To set logging severity level to level 6, informational: Router(config)#logging trap informational To include timestamp with syslog message: Router(config)#service timestamps log datetime Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 80

The functions of a workstation and a server The roles of various equipment in a client/server environment The development of Networking Operating Systems (NOS) An overview of the various Windows platforms An overview of some of the alternatives to Windows operating systems Reasons for network management The layers of OSI and network management model The type and application of network management tools The role that SNMP and CMIP play in network monitoring How management software gathers information and records problems How to gather reports on network performance Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 81

FIN Oct-03 ©Cisco Systems - CCNA Semester 4 Version 3 Comp14 Mod6 – St. Lawrence College – Cornwall ON Canada – Clark slide 82