bmc patrol snmp

Upload: -

Post on 04-Mar-2016

18 views

Category:

Documents


0 download

DESCRIPTION

BMC Patrol Snmp

TRANSCRIPT

  • 7/21/2019 BMC Patrol Snmp

    1/50

    www.bmc.com

    1

    1999 BMC SOFTWARE, INC.

    3/17/99

    Integrating PATROL withSNMP (Simple Network Management Protocol)

    Eric Anderson

    BMC Software Developer Connection

  • 7/21/2019 BMC Patrol Snmp

    2/50

    2 1999 BMC SOFTWARE, INC. 3/17/99

    SNMP - Overview

    Network protocolsTransport layer (UDP/IP)

    Message protocol (ASN.1)

    ersionsSNMPv1

    SNMPv2

    SNMPv3

    OSI network management implementationCMIP CM!T

  • 7/21/2019 BMC Patrol Snmp

    3/50

    3 1999 BMC SOFTWARE, INC. 3/17/99

    SNMP ! "n#erl$ing Transport

    UDP/IP "#pl"cat"ons ($nsa%e)

    $nrel"a&le no con%"r#at"on or g$arantee

    or'er $ncerta"n

    #ay '$pl"cate

    $nsec$re No a$tent"cat"on on transport layer

    No ver"%"cat"on o% or"g"n (#essage spoo%"ng) No "ntegr"ty (#essage can &e ta#pere' "t)

  • 7/21/2019 BMC Patrol Snmp

    4/50

  • 7/21/2019 BMC Patrol Snmp

    5/50

    5 1999 BMC SOFTWARE, INC. 3/17/99

    Management Operations

    %et& %et Ne't& Set %or SNMPv1

    %et lk (*or SNMPv+)

    "nsolicite# Traps *rom Agent (v,)In*orms (v an# v)

  • 7/21/2019 BMC Patrol Snmp

    6/50

    6 1999 BMC SOFTWARE, INC. 3/17/99

    %et Re.est han#ling

    Agent gets re.est *rom mgr l"stens on spec"%"c port 7 typ"cally 181 rece"ves PDU 7 re9$est ID : !ID

    Lookp o* OI/ in memor$Agent sen#s get response

    re9$est ID!IDerror stat$s : "n'e

    val$eSimilar *or get-ne't operation

    ret$rns net !ID "n tree

  • 7/21/2019 BMC Patrol Snmp

    7/507 1999 BMC SOFTWARE, INC. 3/17/99

    Trap sen#ing

    SNMP Agent 'eter#"nes en

    0 pre#e*ine# %eneric trap t$pes (1-2)8;enterpr"seSpec%"c

    Sen# via to port ,2+ on trap receiving machineTrap #estinations has to 3e con*igre#

    Patrol 7 /sn#p/p"51#

  • 7/21/2019 BMC Patrol Snmp

    8/508 1999 BMC SOFTWARE, INC. 3/17/99

    Listening *or traps

    !nly one process can l"sten on a port

    Tat #eans only one trap l"stener per syste# =

    Sol$t"on 7

    PATROL ! trap #emltiple'er (/ietmar 4il#e3ran#)

    No PATROL ! (/I56 write $or own)

  • 7/21/2019 BMC Patrol Snmp

    9/509 1999 BMC SOFTWARE, INC. 3/17/99

    MI (Management In*ormation ase)

    The MI *ile tet$al 'escr"pt"on o% MI layo$t

    >r"tten "n SMI 7 Str$ct$re o% Manag#ent In%or#at"on

    SMI (the MI #e*inition langage)S$pport %or #$lt"ple 'atatypes

    S$pport %or 'ata 'e%"n"t"ons 7 "n'ee' ta&les6 str$ct$res6val$es6...

  • 7/21/2019 BMC Patrol Snmp

    10/5010 1999 BMC SOFTWARE, INC. 3/17/99

    NAMIN% in MI

    Na#"ng "erarcy

    $n"9$e "'ent"%"er6 'on to te"nstance o% any o&?ect

    1.3.8.1.+.1.1@31 "s te !ID o%te MC So%tare s$&tree

    iso1

    3org

    6 dod

    1 internet

    2mgmt

    4private

    1 enterprises

    4421031

    enterpriseIDpeer

    BMC Company X

    Whatever you like

  • 7/21/2019 BMC Patrol Snmp

    11/5011 1999 BMC SOFTWARE, INC. 3/17/99

    The SNMP Manager

    >at "s an SNMP #anager Co#ponents 7

    present MI "n%o ('"splay MI %"les)

    sen' re9$ests

    l"sten %or traps

  • 7/21/2019 BMC Patrol Snmp

    12/5012 1999 BMC SOFTWARE, INC. 3/17/99

    The SNMP Agent

    >at "s an SNMP agent

    7omponents !MI (te MI "n #e#ory)

    re9$est an'l"ng trap sen'"ng

  • 7/21/2019 BMC Patrol Snmp

    13/5013 1999 BMC SOFTWARE, INC. 3/17/99

    Mltiple SNMP Agents on , s$stem

    Con%l"ct 7 only 1 process can l"sten on a port

    Sol$t"ons 7SMU (SNMP M$lt"pleer)

    Agent Agent tens"&"l"ty (r%c 2B+1)#anate (propr"etary SNMP esearc)

    161

    Master

    Agent

    S! agent

    S! agent

    S! agent

  • 7/21/2019 BMC Patrol Snmp

    14/5014 1999 BMC SOFTWARE, INC. 3/17/99

    SNMPv

    New stan#ar#i8ation e**ort *or v+ with enhance#Secrit$User ase' sec$r"ty #o'el (r%c 24B+)

  • 7/21/2019 BMC Patrol Snmp

    15/5015 1999 BMC SOFTWARE, INC. 3/17/99

    SNMP Re*erences

    SNMP v1 Cs

    ,,99 SMI

    ,,90 protocol

    ,+,+ 7oncise MI

    ,+, MI+

    ,+,9 traps

    SNMP v2 Cs

    historical

    See also 7 Te S"#ple >e&ttp7//sn#p.cs.$tente.nl/

    SNMP v2C Cs

    ,:1+-,:10

    SNMP v3 Cs

    ,:19-,:10

    +90,-+909

    +90;-+9;1

    ttp7//."et%.org

  • 7/21/2019 BMC Patrol Snmp

    16/50

    www.bmc.com

    16

    1999 BMC SOFTWARE, INC.

    3/17/99

    PATROL < SNMP

  • 7/21/2019 BMC Patrol Snmp

    17/5017 1999 BMC SOFTWARE, INC. 3/17/99

    PATROL SNMP = >in#ows NT

    PATROL Agent

    With

    SNMP Sub Agent

    Management Station

    SNMP Agent (Master)

    Windows Service

    PATROL SNMP Master Agent

    Port 181 Port *181

    Appications

    !ses Windows SNMP AP"Appications

    !ses Windows SNMP AP"Appications

    !ses Windows SNMP AP"Appications

    !ses Windows SNMP AP"

    SMU

    Port 11

    Appication

    SNMP

    Runtime

    Access

    Method

    #ncapsuator

    process

    Sn#pget()

    PATROL $onsoe

  • 7/21/2019 BMC Patrol Snmp

    18/5018 1999 BMC SOFTWARE, INC. 3/17/99

    PATROL SNMP = "NI?

    PATROL Agent

    With

    SNMP Sub Agent

    Management Station

    SNMP Agent (Master) PATROL SNMP Master Agent

    Port 181 Port *181

    Appications

    !ses Windows SNMP AP"Appications

    !ses Windows SNMP AP"Appications

    !ses Windows SNMP AP"Appications

    %&namica& oaded into

    Agent space

    SMU

    Port 11

    Appication

    SNMP

    Runtime

    Access

    Method

    #ncapsuator

    process

    Sn#pget()

    PATROL $onsoe

  • 7/21/2019 BMC Patrol Snmp

    19/5019 1999 BMC SOFTWARE, INC. 3/17/99

    Master agent con*sion

    !nly nee'e' en access"ng PAT!0 MI'ata ==

    Not nee'e' %or 7

    receiving trapssen#ing traps

    get@set@walk@ operations

  • 7/21/2019 BMC Patrol Snmp

    20/5020 1999 BMC SOFTWARE, INC. 3/17/99

    PATROL Agent as SNMP Manager

    Receiving traps

    %etting in*ormation *rom other SNMP agents

    No Master Agent is nee#e# *or this B

  • 7/21/2019 BMC Patrol Snmp

    21/5021 1999 BMC SOFTWARE, INC. 3/17/99

    7on*igring PATROL *or SNMP

    Set the port number and community name for the PATROL SNMPMaster Agent The PATROL SNMP Master Agent/Sub-Agent model is based on an

    industry standard known as SMUX that allows one or more SNMP Sub-Agents to connect to a single SNMP Master Agent using a TCP SMUX

    port (TCP port 199 by default).Turn on the SNMP support variable. agent con%"g$rat"on var"a&le /sn#p/agent

  • 7/21/2019 BMC Patrol Snmp

    22/5022 1999 BMC SOFTWARE, INC. 3/17/99

    SNMP spport varia3le(s)The SNMPStartparameter is defined within each .km. The ,out of box-default setting for this parameter is

    the active state. If active, SNMPStartlaunches the PATROL SNMP Master Agent (snmpmagt) if it is not startedalready. SNMPStartthen starts the SNMP Sub-Agent.

    The configuration of the PATROL SNMP Sub Agent is controlled by the values contained in the PATROLconfiguration file.

    On UNIX, it is $PATROL_HOME/lib/config.default

    On Windows NT, it is %PATROL_HOME%\lib\ config.default

    The important variables are:

    "/snmp/support" = { REPLACE="yes" },

    "/snmp/agent_auto_start" = { REPLACE="yes" },

    "/snmp/default_port" = { REPLACE="161" },

    "/snmp/master_agent_port" = { REPLACE="1161" },

    "/snmp/trap_port" = { REPLACE="16" },

    "/snmp/sys!ame" = { REPLACE = "unno#n" },

    "/snmp/sysConta$t" = { REPLACE = "%ttp&//###'(m$'$om" },

    "/snmp/sysLo$at)on" = { REPLACE = "*+C oft#are -n$'" },

    "/snmp/p).1m_l)st" = { REPLACE="" },

    "/snmp/support" = { REPLACE="yes" },

    "/snmp/agent_auto_start" = { REPLACE="yes" },

    "/snmp/default_port" = { REPLACE="161" },

    "/snmp/master_agent_port" = { REPLACE="1161" },

    "/snmp/trap_port" = { REPLACE="16" },

    "/snmp/sys!ame" = { REPLACE = "unno#n" },

    "/snmp/sysConta$t" = { REPLACE = "%ttp&//###'(m$'$om" },

    "/snmp/sysLo$at)on" = { REPLACE = "*+C oft#are -n$'" },

    "/snmp/p).1m_l)st" = { REPLACE="" },

  • 7/21/2019 BMC Patrol Snmp

    23/50

    23 1999 BMC SOFTWARE, INC. 3/17/99

    Master agent con*igration

    See *ile @li3@snmpmagtc*gUNI 7 'e%a$lt port 11816 co##$n"ty p$&l"c

    NT 7 'e%a$lt port 11816 co##$n"ty p$&l"c

    No nee# *or M7 master agent i* SM"? masteragent availa3le (eg AI?)

    >hat a3ot 4P CTey $se e#anate #aster agent ; propr"etary

    $n 2 #aster agents6 one on 181 ('e%a$lt) an' one on 1181(Patrol)

  • 7/21/2019 BMC Patrol Snmp

    24/50

    24 1999 BMC SOFTWARE, INC. 3/17/99

    PATROL SNMP Master Agent

    The configuration of the PATROL SNMP Master Agent is controlled by the values contained in thePATROL SNMP Master Agent configuration file.

    On UNIX, it is $PATROL_HOME/lib/snmpmagt.cfg.

    On Windows NT, it is %PATROL_HOME%\lib\snmpmagt.cfg.0 RA++AR&0

    0 +A!AER manager0 2E!3 2ALL 4 !5 7RAP

    0 275 P5R7 809

    0 2:-7; C5++

    0 C5++ 25PERA7-5!

    0 2 0

    0 manager &&= 8%ostname9 4 )paddr

    0 #%ere& %ostname )s def)ned )n /et$/%osts

    0

    0 )paddr &&= 8a'('$'d90 op &&= ALL 4 E7 4 E7 4 7RAP

    0 en$rypt &&= !5

    C5++

    ALL5: ALL 5PERA7-5!

  • 7/21/2019 BMC Patrol Snmp

    25/50

    25 1999 BMC SOFTWARE, INC. 3/17/99

    PATROL Agent as SNMP s3 agent

    A3ilit$ to sen# traps

    4as an accessi3le MI

    To access MI& the master agent mst 3e set p

    correctl$

  • 7/21/2019 BMC Patrol Snmp

    26/50

    26 1999 BMC SOFTWARE, INC. 3/17/99

    Sen#ing traps

    Atomaticall$ !ro# event catalogs

    Trap 'est"nat"ons 7 p"51#

  • 7/21/2019 BMC Patrol Snmp

    27/50

    www.bmc.com

    27

    1999 BMC SOFTWARE, INC.

    3/17/99

    The PATROL MI

  • 7/21/2019 BMC Patrol Snmp

    28/50

    28 1999 BMC SOFTWARE, INC. 3/17/99

    MI O3Eect %rops

    iso (1)

    org (3)

    dod (6)

    internet (1)

    mgmt (2)

    Mib-2 (1)

    system (1)

    private (4)

    enterprises (1)

    bmc (1031)

  • 7/21/2019 BMC Patrol Snmp

    29/50

    29 1999 BMC SOFTWARE, INC. 3/17/99

    MI Ta3les = In#e'ing a Ta3le

    Tabl

    Column -nde@

    59PL pr)ntBsnmp_#alB"sessD", "1''6'1''1'1F1'1'1'1'6'1'1"G'"Hn"GI

    Ro# -nde@ 1''6'1''1'1F1'1'1'1'6'1'1'F str)ng ;P1''6'1''1'1F1'1'1'1'6'1'1'1 11 str)ng PA7R5LAE!71''6'1''1'1F1'1'1'1'6'1'1' J str)ng !+P_7est

    1''6'1''1'1F1'1'1'1'6'1'1' 1F str)ng C5LLEC75R

    1''6'1''1'1F1'1'1'1'6'1'1' str)ng CP