Session 13 NM Tools MJ13/0704 Adapted from Network Management: Principles and Practice © Mani Subramanian 2000 and solely used for Network Management course at Universitas Bina Nusantara 1 NOC Tool Categories (RFC 1470) Network Management Tools Functional Examples : Alarm Manager Security Traffic Network Resources / Components Examples: Bridge Ethernet IP NFS Mechanism Examples: NMS Ping SNMP X Operating Environment Examples: DOS Windows NT Sun Unix Acquisition Free Library Sourcelib • Developed by IETF Working Group on NOC Tools • Update available via • news:comp.networks.noctools • ftp://wuarchive.wustl.edu/doc/noctools MJ13/0704 2 BERT (Bit Error Rate Test) BERT A Modem A Modem B Loop Back BERT B Loop Back • Physical layer monitoring tool • Generates and detects bits • Bit error rate (BER) is calculated by comparing the transmitted pattern with received pattern • Loop back is a feature of the modem • BER can be measured for a modem or two modems and the link in between MJ13/0704 3 Network Software Tools • Status monitoring tools • Traffic monitoring tools • Route monitoring tools MJ13/0704 4 Network Management Tools • SNMP command tools • MIB Walk • snmpsniff MJ13/0704 5 SNMP Command Tools • • • • • • • snmptest snmpget snmpgetnext snmpset snmptrap snmpwalk snmpnetstat • Test tool is an interactive tool to get values of several managed objects, one at a time. • Get, Get-next and Set are the SNMP commands that we learned under SNMP architecture / messages. Execution of these will return an SNMP Response message. • SNMPWalk uses snmpgetnext to trace the entire MIB. • Network status command is used to test the status of network connections of a host. MJ13/0704 6 Network Status • Command: snmpnetstat host community • Useful for finding status of network connections % snmpnetstat noc5 public Active Internet Connections Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp 0 0 *.* *.* CLOSED tcp 0 0 localhost.46626 localhost.3456 ESTABLISHED tcp 0 0 localhost.46626 localhost.3712 ESTABLISHED tcp 0 0 localhost.46626 localhost.3968 ESTABLISHED tcp 0 0 localhost.46626 localhost.4224 ESTABLISHED tcp 0 0 localhost.3456 localhost.46626 ESTABLISHED tcp 0 0 localhost.3712 localhost.46626 ESTABLISHED tcp 0 0 localhost.3968 localhost.46626 ESTABLISHED tcp 0 0 localhost.4224 localhost.46626 ESTABLISHED tcp 0 0 noc5.41472 noc5.4480 ESTABLISHED tcp 0 0 noc5.41472 noc5.4736 ESTABLISHED tcp 0 0 noc5.4480 noc5.41472 ESTABLISHED tcp 0 0 noc5.4736 noc5.41472 ESTABLISHED MJ13/0704 7 SNMP Browser • Command: snmpwalk host community [variable name] • Uses Get Next Command • Presents MIB Tree MJ13/0704 8 Protocol Analyzer Data Capture Device PROTOCOL ANALYZER Raw data transferred on Modem / WAN or LAN Link LAN • Analyzes data packets on any transmission line including LAN • Measurements made locally or remotely • Probe (data capture device) captures data and transfers to the protocol analyzer (no storage) • Data link between probe and protocol analyzer either dial-up or dedicated link or LAN • Protocol analyzer analyzes data at all protocol levels MJ13/0704 9 MRTG • Multi Router Traffic Grouper (Oeticker and Rand) • www.ee.ethz.ch/stats/mrtg/ • Generates graphic presentation of traffic on Web • Daily view • Weekly view • Monthly view • Yearly view MJ13/0704 10 Enterprise Management • Management of data transport • IBM Netview, Sun Solstice, HP OpenView, Cabletron Spectrum • Systems management • CA Unicenter and Tivoli TME • Network and systems management • Partnerships • Telecommunications management • TMN, Operations systems • Service management and policy management MJ13/0704 11 NMS Components Hardware Operating System Core Application Services Common SNMP Services Vendor Specific NMS Services MJ13/0704 12 NMS Components Component Hardware Service Processor Monitor Mouse and Keyboard Communications Operating system OS services Core application services Common SNMP services Vendor-specific NMS services MJ13/0704 Example Sun Sparc HP 9000 PC UNIX LINUX / FreeBSD Solaris MS Windows 95 / 98 / NT OpenView SunNet Manager Solstice Enterprise Manager MS Windows Display GUI Database Report generation Communication services SNMPv1 messages OpenView Network SNMPv2 messages Node Manager MIB management Basic SNMP Applica IBM NetView tions SunNet Manager 3rd party NMS API Solstice Enterprise Manager MIB management CiscoWorks SNMP applications Transcend Config. management Physical entity display 13 Multi-NMS Configuration Vendor 1 NMS Configuration Vendor 2 NMS Configuration Managed Network Elements Fault Performance Manager of Managers Configuration Vendor 3 NMS MJ13/0704 14 Network Configuration • Configure agents • Configure management systems • Community administration parameters • Community name • MIB view • Trap targets • Auto-discovery : Scope MJ13/0704 15 Network Monitoring • • • • By polling By traps Failure indicated by pinging or traps Ping frequency optimized for network load vs. quickness of detection • Trap messages: linkdown, linkUp, coldStart, warmStart, etc. • Network topology discovered by auto-discovery • Monitoring done at multiple levels - “drilling” MJ13/0704 16 Commercial NMS • Enterprise NMS • Hewlett-Packard OpenView • Sun SunNet Manager • IBM Netview • Low End NMS • SNMPc • System & Network Management • Computer Associates Unicenter TNG • Tivoli TME / Netview MJ13/0704 17 Commercial NMS • Low End NMS • Enterprise NMS • Centralized • Distributed • System and Network Management MJ13/0704 18 HP OpenView Network Node Manager • • • • • • • • Auto-discovery and mapping Drill-down views Fault monitoring Event monitoring MIB Browser SNMP tools Traffic monitoring 3rd party integration • OpenView is Hewlett-Packard’s platform for Network Management • Many NMSs use OpenView Platform: CiscoWorks, etc • Drill-down Map Hierarchy MJ13/0704 19 HP OpenView Platform GUI API Management Applications API Management Services Managed Objects • Open, modular, and distributed architecture • Object oriented design, Open API-based architecture MJ13/0704 20 OpenView Distributed Platform Management Applications • Postmaster integrates all management services multiple protocol stacks: SNMP, CMIP, TCP/IP • Routing enables distributed message routing • Event services control event and alarm messages • Management services interface with management applications via APIs APIs Routing Event Services Postmaster CMIP SNMP TCP/IP Communications Infrastructure Network MJ13/0704 21 Distributed OpenView NNMs OpenView NNM Management Station OpenView NNM Collection Station A OpenView NNM Collection Station B OpenView NNM Collection Station C Site A Site B Site C Enterprise Network • An enterprise network managed by multiple NMSs • Collection stations could be regular NNMs or entry-NNMs (100 nodes) • Filtered information sent to MoM (top level NNM) reduces traffic • MoM integrates and presents enterprise data MJ13/0704 22