Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...
Share Embed Flag
Download ePaper

Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ... Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

kc.mcafee.com
from kc.mcafee.com More from this publisher
18.07.2013 Views

Chapter 15: Configuring the SNMP Agent SNMP and Sidewinder G2 SNMP and Sidewinder G2 464 Figure 194: Managing distributed systems using SNMP This section introduces SNMP concepts and explains how to configure the Sidewinder G2 SNMP agent. It also explains what needs to be done to allow Sidewinder G2 to send or route messages to remote systems in an external network. Sidewinder G2 supports SNMPv1 and SNMPv2c. SNMP is the industry standard for network management. You can set up SNMP agent software that allows the Sidewinder G2 to be monitored by SNMP compliant network management stations located on an internal or external network. You can also configure the Sidewinder G2 to route SNMP messages between a management station inside the Sidewinder G2 and an SNMP agent on a system in an external network. Note: The SNMP agent cannot run in the Firewall burb. Although only one SNMP agent is allowed to operate on the Sidewinder G2, access through other burbs is supported using the UDP proxy. In addition, SNMP will only accept requests addressed to the first interface in a burb. SNMP basics A network that is managed using SNMP involves two primary components: a manager (management station) and a number of managed nodes. The management station is typically a PC or UNIX workstation running network management software such as Hewlett-Packard’s OpenView ® Windows or Novell ManageWise. Managed nodes are networking devices such as routers or Sidewinder G2s that contain an SNMP agent. Figure 194 shows a management station communicating with SNMP nodes to obtain network configuration information. SNMP Managemen t Station Sidewinder G2 (managed node) R router (managed node) server (managed node)

Figure 195: Community name within an SNMP message Chapter 15: Configuring the SNMP Agent SNMP and Sidewinder G2 The management station displays a graphical representation of a network’s topology through a Windows-based environment. In general, network managers can monitor each SNMP node (including the Sidewinder G2) by clicking an icon representing each node in the network’s topology. A management station in the internal or external network can request information from a managed node’s SNMP agent. The SNMP management station sends a managed node Get and GetNext SNMP messages to retrieve node-specific parameters and variables, called objects. The message response from the managed system provides the SNMP administrator with information on a node’s device names, status, network connections, etc. Important: SNMPv1 agents typically allow Get, GetNext, and Set requests from the management station. However, the Sidewinder G2 SNMPv1 agent does not support Set requests. This prevents a management system from sending commands to change variables or parameters in the Sidewinder G2. Each managed node can send an unsolicited event notification message, called a trap, to a management station when it detects certain system events. For example, you can configure the SNMP agent in the Sidewinder G2 to issue a trap whenever an unauthorized user tries to read, write, or execute a protected file on the Sidewinder G2. (Refer to “Sidewinder G2 SNMP traps” on page 579 for a list of all traps supported by Sidewinder G2.) When setting up SNMP management, a network administrator assigns the management station and the nodes it will manage a community name. As shown in Figure 195, the community name is in the authentication header in each SNMP message exchanged between a management station and a managed node. VERSION COMMUNITY NAME SNMP COMMAND: GET, GETNEXTREQUEST, ETC. The SNMP agent treats the community name like a password to validate the identity of a management station. For example, suppose a management station sends a get request to retrieve information from a managed node’s SNMP agent. If the community name within the get request is not also used by the SNMP agent, the agent will not return information to the management station. Caution: To increase security on your network, do not use common default names such as “public” or “private,” which can be easily guessed. Both the management station and the managed node also contain Management Information Bases (MIBs) that store information about the managed objects. Currently, the SNMP agent on Sidewinder G2 supports 465

Chapter 15: Configuring the SNMP Agent<br />

SNMP and <strong>Sidewinder</strong> <strong>G2</strong><br />

SNMP and<br />

<strong>Sidewinder</strong> <strong>G2</strong><br />

464<br />

Figure 194: Managing<br />

distributed systems using<br />

SNMP<br />

This section introduces SNMP concepts and explains how to configure the<br />

<strong>Sidewinder</strong> <strong>G2</strong> SNMP agent. It also explains what needs to be done to allow<br />

<strong>Sidewinder</strong> <strong>G2</strong> to send or route messages to remote systems in an external<br />

network.<br />

<strong>Sidewinder</strong> <strong>G2</strong> supports SNMPv1 and SNMPv2c. SNMP is the industry<br />

standard for network management. You can set up SNMP agent s<strong>of</strong>tware that<br />

allows the <strong>Sidewinder</strong> <strong>G2</strong> to be monitored by SNMP compliant network<br />

management stations located on an internal or external network. You can also<br />

configure the <strong>Sidewinder</strong> <strong>G2</strong> to route SNMP messages between a<br />

management station inside the <strong>Sidewinder</strong> <strong>G2</strong> and an SNMP agent on a<br />

system in an external network.<br />

Note: The SNMP agent cannot run in the Firewall burb. Although only one SNMP<br />

agent is allowed to operate on the <strong>Sidewinder</strong> <strong>G2</strong>, access through other burbs is<br />

supported using the UDP proxy. In addition, SNMP will only accept requests<br />

addressed to the first interface in a burb.<br />

SNMP basics<br />

A network that is managed using SNMP involves two primary components: a<br />

manager (management station) and a number <strong>of</strong> managed nodes. The<br />

management station is typically a PC or UNIX workstation running network<br />

management s<strong>of</strong>tware such as Hewlett-Packard’s OpenView ® Windows or<br />

Novell ManageWise. Managed nodes are networking devices such as routers<br />

or <strong>Sidewinder</strong> <strong>G2</strong>s that contain an SNMP agent. Figure 194 shows a<br />

management station communicating with SNMP nodes to obtain network<br />

configuration information.<br />

SNMP<br />

Managemen<br />

t Station<br />

<strong>Sidewinder</strong> <strong>G2</strong><br />

(managed node)<br />

R<br />

router<br />

(managed node)<br />

server<br />

(managed node)

logo

products

Resources

Company

Terms of service
Privacy policy
Cookie policy
Cookie settings
Imprint
Change language
Made with love in Switzerland
© 2024 Yumpu.com all rights reserved

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!